Moxi624 vulnerabilities

Products

• Mogublog 10
• Mogu Blog V2 7

Newest

• moxi624 mogublog MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit CVE-2026-109177 5.3 MediumOctober 12, 2026
• moxi624 mogublog MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files CVE-2026-109176 5.3 MediumOctober 12, 2026
• moxi624 mogublog MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList CVE-2026-109175 5.3 MediumOctober 12, 2026
• moxi624 mogublog MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig CVE-2026-109174 7.1 HighOctober 12, 2026
• moxi624 mogu blog v2 moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting CVE-2026-90568 5.1 MediumSeptember 13, 2026
• moxi624 mogublog MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint CVE-2026-89265 5.3 MediumSeptember 11, 2026
• moxi624 mogublog MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity CVE-2026-89264 5.3 MediumSeptember 11, 2026
• moxi624 mogublog MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint CVE-2026-89263 6.9 MediumSeptember 11, 2026
• moxi624 mogublog MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check CVE-2026-89262 8.7 HighSeptember 11, 2026
• moxi624 mogublog MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints CVE-2026-89261 6.9 MediumSeptember 11, 2026
• moxi624 mogublog MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint CVE-2026-89260 8.7 HighSeptember 11, 2026
• moxi624 mogu blog v2 moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery CVE-2026-6625 6.9 MediumApril 20, 2026
• moxi159753 mogu blog v2, mogublog project mogublog +1 more moxi159753 Mogu Blog v2 ZIP File unzipFile FileOperation.unzip path traversal CVE-2025-13816 5.3 MediumDecember 1, 2025
• moxi159753 mogu blog v2, mogublog project mogublog +1 more moxi159753 Mogu Blog v2 pictures unrestricted upload CVE-2025-13815 5.3 MediumDecember 1, 2025
• moxi159753 mogu blog v2, mogublog project mogublog +1 more moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side request forgery CVE-2025-13814 6.9 MediumDecember 1, 2025
• moxi159753 mogu blog v2, mogublog project mogublog +1 more moxi159753 Mogu Blog v2 Storage Management Endpoint storage authorization CVE-2025-13813 6.3 MediumDecember 1, 2025
• moxi624 mogu blog v2, mogublog project mogublog +1 more moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal CVE-2023-2101 4.3 MediumApril 15, 2023