Quequnlong vulnerabilities
We track 5 vulnerabilities in Quequnlong products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on October 27, 2025.
Latest Quequnlong vulnerabilities
- 9.8 Critical severity
shiyi-blog: Deserialization of Untrusted Data
A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be
- 9.8 Critical severity
shiyi-blog: Improper Authentication
A vulnerability, which was classified as critical, was found in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file /api/sys/user/verifyPassword/ of the component Administrator Backend. The manipulation leads to improper authenticati
- 7.5 High severity
shiyi-blog: Incorrect Privilege Assignment
A vulnerability, which was classified as critical, has been found in quequnlong shiyi-blog up to 1.2.1. This issue affects some unknown processing of the file /dev api/app/album/photos/. The manipulation leads to improper authorization. The attack may be initi
- 9.8 Critical severity
shiyi-blog: Server-Side Request Forgery
A vulnerability classified as critical was found in quequnlong shiyi-blog up to 1.2.1. This vulnerability affects unknown code of the file /app/sys/article/optimize. The manipulation of the argument url leads to server-side request forgery. The attack can be i
- 9.8 Critical severity
shiyi-blog: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical has been found in quequnlong shiyi-blog up to 1.2.1. This affects an unknown part of the file /api/file/upload. The manipulation of the argument file/source leads to path traversal. It is possible to initiate the attack r