CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

CVE-2020-21321: Cross-Site Request Forgery (CSRF)

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

PT-2021-10609

Name of the Vulnerable Software and Affected Versions: emlog version 6.0 Description: The issue allows attackers to perform a Cross-Site Request Forgery CSRF attack via the "/admin/link.php?action=addlink" API endpoint, enabling them to arbitrarily add articles. Recommendations: For emlog version...