CVE-2018-11209

7.2 highEPSS 1.0%

An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via a dictionary or rainbow-table attack. NOTE: the vendor declined to accept this as a valid issue

Severity

CVSS 3.0

7.2 high

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-327
Published: 2018-05-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zblogcn:z-blogphp

References

https://github.com/zblogcn/zblogphp/issues/188
https://github.com/zblogcn/zblogphp/issues/205
https://github.com/zblogcn/zblogphp/issues/188
https://github.com/zblogcn/zblogphp/issues/205

Check your stack JSON