PerfreeBlog Arbitrary File Read Vulnerability

Vulnerability

An arbitrary file read vulnerability has been identified in PerfreeBlog version 4.0.11. The issue arises in the 'getThemeFileContent' function, allowing unauthorized access to file contents.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive files on the server.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
2.5
exploitability
8.9
remediation
0.0
relevance
0.4
threat
6.4
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.