Back to Database
Status published
Medium
CVE-2019-6034
a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and...
Vulnerability Description
a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6034
Credits & Attribution
No credits recorded in the NVD database.
References
More from appleple inc.
View All →CVE-2025-41429
a-blog cms multiple versions neutralize logs improperly. If this vulnerability...
Low
2.1
CVE-2025-36560
Server-side request forgery vulnerability exists in a-blog cms multiple versions....
Critical
9.2
CVE-2025-32999
Cross-site scripting vulnerability exists in a-blog cms versions prior to...
Medium
4.8
CVE-2025-31103
Untrusted data deserialization vulnerability exists in a-blog cms. Processing a...
High
7.5
CVE-2025-27566
Path traversal vulnerability exists in a-blog cms versions prior to...
Medium
5.1
Affected Vendor
appleple inc.
View all reports →Affected Software
a-blog cms
Vulnerable Versions:
versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x)
Timeline
Official Publish:
December 26th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.