Lucene search

China National Vulnerability DatabaseCNVD-2023-99180

HistoryDec 15, 2023 - 12:00 a.m.

Unspecified Vulnerability in Emlog (CNVD-2023-9918065)

2023-12-1500:00:00

China National Vulnerability Database

www.cnvd.org.cn

emlog

php

mysql

cms

security vulnerability

uid parameter

unauthorized access

database

sql injection

data theft

privacy breach

web page manipulation

database tampering

link embedding

cnvd

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.4%

JSON

emlog is a PHP and MySQL based CMS builder for emlog personal developers. Emlog pro2.1.14 version of a security vulnerability, the vulnerability stems from the uid parameter in /admin/media.php contains SQL injection vulnerability. Attackers can use this vulnerability to gain unauthorized access to database data, steal users’ privacy and personal information, manipulate the database to tamper with certain web pages, modify the value of some database fields, embed links to the Internet horse, and carry out attacks on the horse.

CPENameOperatorVersion
emlog emlog proeq2.1.14

CPE	Name	Operator	Version
	emlog emlog pro	eq	2.1.14