Advisories · Technology
moxi624 MoguBlog.
Every CVE that names moxi624 MoguBlog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit
- moxi624 MoguBlog
- Broken access control
- CVSS 5.3 Medium
MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files
- moxi624 MoguBlog
- Broken access control
- CVSS 5.3 Medium
MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList
- moxi624 MoguBlog
- Broken access control
- CVSS 7.1 High
MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig
- moxi624 MoguBlog
- Broken access control
- CVSS 5.3 Medium
MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint
- moxi624 MoguBlog
- Broken access control
- CVSS 5.3 Medium
MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity
- moxi624 MoguBlog
- Broken access control
- CVSS 6.9 Medium
MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint
- moxi624 MoguBlog
- Authentication bypass
- CVSS 8.7 High
MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check
- moxi624 MoguBlog
- Broken access control
- CVSS 6.9 Medium
MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints
- moxi624 MoguBlog
- Authentication bypass
- CVSS 8.7 High
MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint
- moxi624 MoguBlog
- XML external entities (XXE)