CyberSecBulletin

Zhenfeng13 vulnerabilities

We track 4 vulnerabilities in Zhenfeng13 products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 19, 2025.

4vulnerabilities
4critical
0high
0exploited
9.8average CVSS score

Latest Zhenfeng13 vulnerabilities

  • 9.8 Critical severity

    My-BBS: Improper Access Control

    CVE-2025-3807Zhenfeng13

    A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload of the file src/main/java/com/my/bbs/controller/common/UploadController.java of the component Endpoint. The manipulation leads to unrestrict

  • 9.8 Critical severity

    My-Blog-layui: Unrestricted Upload of File with Dangerous Type

    CVE-2025-3593Zhenfeng13

    A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload.

  • 9.8 Critical severity

    My-Blog: Unrestricted Upload of File with Dangerous Type

    CVE-2024-13145Zhenfeng13

    A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file lea

  • 9.8 Critical severity

    My-Blog: Unrestricted Upload of File with Dangerous Type

    CVE-2024-13144Zhenfeng13

    A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image-