Appleple vulnerabilities
We track 7 vulnerabilities in Appleple products across 7 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2025.
Latest Appleple vulnerabilities
- 9.8 Critical severity
a-blog cms: Improper Output Neutralization for Logs
a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's session.
- 7.5 High severity
a-blog cms: Server-Side Request Forgery
Server-side request forgery vulnerability exists in a-blog cms multiple versions. If this vulnerability is exploited, a remote unauthenticated attacker may gain access to sensitive information by sending a specially crafted request.
- 7.2 High severity
a-blog cms: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerab
- 7.5 High severity
a-blog cms (Ver.3.1.x series): Deserialization of Untrusted Data
Untrusted data deserialization vulnerability exists in a-blog cms. Processing a specially crafted request may store arbitrary files on the server where the product is running. This can be leveraged to execute an arbitrary script on the server.
- 8.1 High severity
a-blog cms Ver.3.1.x series: Improper Limitation of a Pathname to a Restricted Directory
Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and
- 8.8 High severity
a-blog cms Ver.3.1.x series: Unrestricted Upload of File with Dangerous Type
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 a
- 9.8 Critical severity
a-blog cms: Authentication Bypass by Spoofing
Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versions prior to Ver.2.11.41 allows a remote