Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/04/03 10:37 p.m.23 views

CVE-2026-34788 Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters

Emlog is an open source website building system. In versions 2.6.2 and prior, a SQL injection vulnerability exists in include/model/tagmodel.php at line 168. The updateTagName function directly interpolates user input into the SQL query string without using parameterized queries or proper escapin...

6.5CVSS0.00343EPSS
SaveExploits1References1
Rows per page
Query Builder