CVE-2018-6656

Publication date

2018-02-06 14:00:00

Family

mitre

State

PUBLISHED

Description

Z-BlogPHP 1.5.1 has CSRF via zb_users/plugin/AppCentre/app_del.php, as demonstrated by deleting files and directories.