| शीर्षक | kevquirk PureBlog 3.7.2 Path Traversal |
|---|
| विवरण | PureBlog through 3.7.2 allows authenticated administrators to write files outside the content/pages directory via a path traversal in the page slug parameter.
The page editor accepts the slug verbatim, and save_page() only normalizes an empty slug, so a non-empty slug containing ../ is concatenated into the destination path and passed to file_put_contents(), enabling arbitrary .md file write and overwrite (content tampering and denial of service).
Reproduction: https://github.com/sumo166/CVE-apply/blob/main/kevquirk/pureblog/Page%20Slug%20Path%20Traversal%20Arbitrary%20File%20Write%20(CWE-22)_cve.md |
|---|
| स्रोत | ⚠️ https://github.com/kevquirk/pureblog/issues/87 |
|---|
| उपयोगकर्ता | summmm (UID 69690) |
|---|
| सबमिशन | 17/10/2026 03:33 PM (23 दिन पहले) |
|---|
| संयम | 09/11/2026 09:09 AM (23 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 433066 [kevquirk PureBlog तक 3.7.2 Page Editor includes/lib/content.php save_page page slug निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|