Mmoxi624

Products

Exploited and recent CVEs

• CVE-2026-109177 Medium 4.3 MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit 0.2%
• CVE-2026-109176 Medium 5.4 MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files 0.2%
• CVE-2026-109175 Medium 4.3 MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList 0.2%
• CVE-2026-109174 Medium 6.5 MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig 0.2%
• CVE-2026-90568 Low 3.5 moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting 0.3%
• CVE-2026-89265 Medium 4.3 MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint 0.4%
• CVE-2026-89264 Medium 4.3 MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity 0.4%
• CVE-2026-89263 Medium 5.3 MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint 0.5%
• CVE-2026-89262 High 7.5 MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check 0.5%
• CVE-2026-89261 Medium 6.5 MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints 0.8%
• CVE-2026-89260 High 7.5 MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint 0.7%
• CVE-2026-6625 High 7.3 moxi624 Mogu Blog v2 Picture Storage Service LocalFileServiceImpl.java LocalFileServiceImpl.uploadPictureByUrl server-side request forgery 0.3%
• CVE-2023-2101 Medium 4.3 moxi624 Mogu Blog v2 uploadPicsByUrl uploadPictureByUrl absolute path traversal 0.8%