CVE-2024-28713
published 2024-03-28CVE-2024-28713: An issue in Mblog Blog system v.3.5.0 allows an attacker to execute arbitrary code via a crafted file to the theme management feature.
PriorityP348critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.54%
71.7th percentile
An issue in Mblog Blog system v.3.5.0 allows an attacker to execute arbitrary code via a crafted file to the theme management feature.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mtons | mblog | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://mblog.comhttps://gitee.com/mtons/mbloghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%871.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%872.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%873.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%874.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%875.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/Mblog%20blog%20system%20has%20SSTI%20template%20injection%20vulnerability.mdhttp://mblog.comhttps://gitee.com/mtons/mbloghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%871.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%872.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%873.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%874.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/%E5%9B%BE%E7%89%875.pnghttps://github.com/JiangXiaoBaiJia/cve/blob/main/Mblog%20blog%20system%20has%20SSTI%20template%20injection%20vulnerability.mdhttps://www.vicarius.io/vsociety/posts/ssti-in-mblog-351-a-tale-of-a-glorified-rce-cve-2024-28713-28714
2024-03-28
Published