CVE-2016-1178: Appleple A-Blog CMS

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors.

Affected products

• Appleple A-Blog CMS: up to and including 2.6.0.1

Published 2017-04-12. Last modified 2026-06-17.