moxi624 vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202612

Newest CVEs

• CVE-2026-109177

  MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-109176

  MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-109175

  MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-109174

  MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig

  moxi624 · MoguBlog

  High7.1
• CVE-2026-90568

  moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting

  moxi624 · Mogu Blog v2

  Medium5.1
• CVE-2026-89265

  MoguBlog through 6.2 Missing Authorization on the Admin getPictureSortByUid Endpoint

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-89264

  MoguBlog through 6.2 Comment Author Spoofing via Request-Body Identity

  moxi624 · MoguBlog

  Medium5.3
• CVE-2026-89263

  MoguBlog through 6.2 Missing Authentication on the Comment Email-Notification Endpoint

  moxi624 · MoguBlog

  Medium6.9
• CVE-2026-89262

  MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check

  moxi624 · MoguBlog

  High8.7
• CVE-2026-89261

  MoguBlog through 6.2 Missing Authentication for Elasticsearch Index Management Endpoints

  moxi624 · MoguBlog

  Medium6.9