← Back

Blog Ssm

blog-ssm

Vendor: Blog Ssm Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-40036
1Blog Ssm Project
1Blog Ssm
Apr 2, 2025
Jan 26, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An issue was discovered in Rawchen blog-ssm v1.0 allows an attacker to obtain sensitive user information by bypassing permission checks via the /adminGetUserList component.
CVE-2022-40035
1Blog Ssm Project
1Blog Ssm
Apr 1, 2025
Jan 26, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
File Upload Vulnerability found in Rawchen Blog-ssm v1.0 allowing attackers to execute arbitrary commands and gain escalated privileges via the /uploadFileList component.