CVE-2021-30081

2021-05-2418:15:08

Google

osv.dev

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.7%

JSON

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page.

CPENameOperatorVersion
emlogeq5.3.1
emlogeqemlog_5.2.0
emlogeqemlog_5.2.1
emlogeq6.0.0
emlogeqemlog_5.3.0
emlogeqemlog_5.1.3
emlogeqemlog_5.1.2

Name	Operator	Version
emlog	eq	5.3.1
emlog	eq	emlog_5.2.0
emlog	eq	emlog_5.2.1
emlog	eq	6.0.0
emlog	eq	emlog_5.3.0
emlog	eq	emlog_5.1.3
emlog	eq	emlog_5.1.2

References

github.com/emlog/emlog/issues/74