emlog deserialization vulnerability

2023-10-0700:00:00

China National Vulnerability Database

www.cnvd.org.cn

emlog

php

mysql

cms

deserialization vulnerability

remote attacker

arbitrary code

cache.php

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

53.4%

JSON

emlog is a PHP and MySQL based CMS builder for emlog personal developers. emlog pro v2.1.15 and previous versions of the existence of a deserialization vulnerability, the vulnerability stems from the application in the receipt of user-submitted serialized data insecure deserialization process, a remote attacker can exploit the vulnerability through the cache.php component to execute arbitrary code.