Medium severity6.1NVD Advisory· Published Jun 7, 2021· Updated Jun 17, 2026

CVE-2020-18268

Description

Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."

Affected products

Zblogcn/Zblogphp
cpe:2.3:a:zblogcn:z-blogphp:*:*:*:*:*:*:*:*
Range: <=1.5.2
Z-BlogPHP/Z-BlogPHPdescription
Blogphp/Blogphpllm-fuzzy
Range: <=1.5.2

Patches

Vulnerability mechanics

References

github.com/zblogcn/zblogphp/issues/209nvdExploitIssue TrackingPatchThird Party Advisory
github.com/zblogcn/zblogphp/issues/216nvdExploitIssue TrackingPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000