CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS website builder by emlog's individual developers. A security vulnerability exists in emlog version 2.3.18 and prior versions. An attacker can exploit the vulnerability to write malicious JavaScript code in published posts...

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

CVE-2024-50655

CVE-2024-50655 affects emlog pro versions

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

PT-2024-34383 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.3.18 and earlier Description: The issue allows attackers to write malicious JavaScript code in published articles, potentially leading to Cross Site Scripting XSS attacks. Recommendations: For emlog pro versions 2.3.18 an...

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

CVE-2024-46540

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

CVE-2024-46540

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

CVE-2024-46540

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

CVE-2024-46540

CVE-2024-46540 affects Emlog Pro prior to v2.3.15. The vulnerability resides in the /admin/store.php component, enabling a remote code execution where an attacker can use remote file downloads and self-extract functions to upload web shells and gain system privileges. Documented impact: potential...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS website builder for emlog individual developers. A security vulnerability exists in emlog versions prior to v2.3.15, which stems from the presence of a Remote Code Execution RCE vulnerability that allows an attacker to gain system privileges by uploading a...

PT-2024-32027 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions prior to 2.3.15 Description: A remote code execution issue in the /admin/store.php component of Emlog Pro allows attackers to use remote file downloads and self-extract functions to upload webshells to the target server,...

CVE-2024-46540

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

CVE-2024-31612

Emlog pro2.3 is vulnerable to Cross Site Request Forgery CSRF via twitter.php which can be used with a XSS vulnerability to access administrator information...

CVE-2024-31612

CVE-2024-31612 affects Emlog Pro 2.3. The Red Hat/NVD/OSV/ other entries describe a CSRF vulnerability via twitter.php that can be combined with a Cross-Site Scripting (XSS) issue to access administrator information. This is the explicit vulnerability mechanism provided in the connected documents...

CVE-2024-31612

Emlog pro2.3 is vulnerable to Cross Site Request Forgery CSRF via twitter.php which can be used with a XSS vulnerability to access administrator information...

CVE-2024-31612

Emlog pro2.3 is vulnerable to Cross Site Request Forgery CSRF via twitter.php which can be used with a XSS vulnerability to access administrator information...

emlog Security Vulnerabilities

emlog is a PHP and MySQL based CMS website builder by emlog's individual developers. A security vulnerability exists in emlog version 2.3. An attacker can exploit this vulnerability to conduct a cross-site request forgery CSRF attack via twitter.php...

PT-2024-24153 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog pro version 2.3 Description: The issue allows for Cross Site Request Forgery CSRF via the twitter.php file, which can be exploited in conjunction with a Cross Site Scripting XSS vulnerability to access administrator information...