AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-9153

HIGH · CVSS 7.2 EPSS 1.23%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-16 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-9153
Severity
HIGH
CVSS
7.2
EPSS
1.23%

Original NVD Description

The plugin upload component in Z-BlogPHP 1.5.1 allows remote attackers to execute arbitrary PHP code via the app_id parameter to zb_users/plugin/AppCentre/plugin_edit.php because of an unanchored regular expression, a different vulnerability than CVE-2018-8893. The component must be accessed directly by an administrator, or through CSRF.