Lucene search

China National Vulnerability DatabaseCNVD-2023-74535

HistoryOct 07, 2023 - 12:00 a.m.

emlog pro /admin/plugin.php arbitrary file upload vulnerability

2023-10-0700:00:00

China National Vulnerability Database

www.cnvd.org.cn

emlog

cms

php

mysql

vulnerability

arbitrary file upload

remote attacker

malicious file

arbitrary code

application context

cnvd

AI Score

7.9

Confidence

High

EPSS

0.002

Percentile

53.3%

JSON

emlog is a lightweight blog and CMS builder based on PHP and MySQL. An arbitrary file upload vulnerability exists in emlog pro /admin/plugin.php, which can be exploited by a remote attacker to submit a special request that can upload a malicious file to execute arbitrary code in the application context.