Skip to content
OpenAdvisories

Vendor

zhenfeng13

12 known vulnerabilities.

Products

My-Blog 7 My-Blog-layui 3 My-BBS 2
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-9100

    zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay

    A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The manipulation leads to authentication bypass by capture-replay. The a…

    zhenfeng13 My-Blog
  • Medium 4.3
    CVE-2025-8739

    zhenfeng13 My-Blog save cross-site request forgery

    A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be…

    zhenfeng13 My-Blog
  • Medium 4.3
    CVE-2025-3808

    zhenfeng13 My-BBS cross-site request forgery

    A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the p…

    zhenfeng13 My-BBS
  • Medium 6.3
    CVE-2025-3807

    zhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted upload

    A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0. This affects the function Upload of the file src/main/java/com/my/bbs/controller/common/UploadController.java of the component Endpoint. The manipulation leads to unrestric…

    zhenfeng13 My-BBS
  • Medium 6.3
    CVE-2025-3593

    ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload

    A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload.…

    code-projects zhenfeng13 My-Blog-layui My-Blog-layui
  • Medium 6.3
    CVE-2024-13145

    zhenfeng13 My-Blog uploadController. java upload unrestricted upload

    A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file le…

    zhenfeng13 My-Blog
  • Medium 6.3
    CVE-2024-13144

    zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload

    A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0. Affected is the function uploadFileByEditomd of the file src/main/java/com/site/blog/my/core/controller/admin/BlogController.java. The manipulation of the argument editormd-image…

    zhenfeng13 My-Blog
  • Medium 4.3
    CVE-2023-1937

    zhenfeng13 My-Blog userInfo cross-site request forgery

    A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog. Affected is an unknown function of the file /admin/configurations/userInfo. The manipulation of the argument yourAvatar/yourName/yourEmail leads to cross-site request forge…

    zhenfeng13 My-Blog