emlog code issue vulnerability (CNVD-2023-65131)

2023-06-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

emlog

php

mysql

cms

file upload

privilege escalation

vulnerability

EPSS

0.004

Percentile

73.7%

JSON

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A code issue vulnerability exists in emlog version 6.0.0, which stems from a file upload vulnerability in /admin/plugin.php. An attacker can exploit this vulnerability to elevate privileges.

EPSS

0.004

Percentile

73.7%

JSON

Related for CNVD-2023-65131