967 matches found
CVE-2023-41621
A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...
CVE-2023-41621
A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...
Cross site scripting
A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...
Emlog Security Vulnerability
emlog is emlog personal developer of a PHP and MySQL based CMS site building system. A security vulnerability exists in Emlog Pro version v2.1.14, which originates from the component /admin/store.php contains a cross-site scripting XSS vulnerability...
CVE-2023-41621
A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...
PT-2023-28004 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.1.14 Description: A Cross Site Scripting XSS issue was found in the /admin/store.php component. Recommendations: For Emlog Pro version 2.1.14, consider disabling access to the /admin/store.php component until a patch is...
CVE-2023-41618
Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...
CVE-2023-41618
Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...
CVE-2023-41618
Emlog Pro v2.1.14 contains a reflected XSS vulnerability via the component /admin/article.php?active_savedraft. The issue is triggered when a crafted payload is reflected back to the user in the admin context, potentially enabling execution of arbitrary Web scripts/HTML in the user’s browser. Doc...
CVE-2023-41621
CVE-2023-41621 is a Cross-Site Scripting (XSS) vulnerability in Emlog Pro v2.1.14 via the /admin/store.php component. The NVD/Nuclei-derived details describe an XSS that, if exploited, could lead to unauthorized access or data theft. The CVSS v3.1 base score is 6.1 (Medium) with network attack ve...
CVE-2023-41621
A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...
CVE-2023-41618
Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting XSS vulnerability via the component /admin/article.php?activesavedraft...
CVE-2023-41621
A Cross Site Scripting XSS vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php...
CVE-2023-41623
Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php...
CVE-2023-41623
Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php...
Sql injection
Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php...
PT-2023-28005 · Emlog · Emlog
Name of the Vulnerable Software and Affected Versions: Emlog version pro2.1.14 Description: A SQL injection issue was discovered via the uid parameter at the "/admin/media.php" API endpoint. This allows for potential exploitation. Recommendations: For Emlog version pro2.1.14, consider restricting...
CVE-2023-41623
CVE-2023-41623 affects Emlog pro2.1.14, where a SQL injection is exposed via the uid parameter in /admin/media.php. The NVD entry lists a CVSS v3.1 base score of 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required as HIGH; impacts are confidentiality, integrity, ...
Emlog 安全漏洞
emlog is a PHP and MySQL based CMS builder for emlog personal developers. Emlog pro2.1.14 version of a security vulnerability, the vulnerability stems from the uid parameter in /admin/media.php contains SQL injection vulnerability. Attackers can use this vulnerability to gain unauthorized access ...