CVE-2017-17794

Published December 20th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

7.5

HIGH

Affected

PROJECT

Description

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field.

BlogoText/blogotext

A little more than a lightweight SQLite Blog-Engine.

GitHub

139