CVE-2023-44974

Summary: CVE-2023-44974 affects Emlog Pro v2.2.0, path /admin/plugin.php, where an arbitrary file upload enables remote code execution by uploading a crafted PHP file. Multiple sources describe the issue consistently across NVD, CNVD, OSV, CVE lists, and CNVD Chinese vulnerability database. The N...

PT-2023-29325 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.2.0 Description: An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro allows attackers to execute arbitrary code via uploading a crafted PHP file. Recommendations: For Emlog Pro version...

CVE-2023-44973

An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2023-44974

An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2023-44973

An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

Cross site scripting

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

CVE-2023-43267

The CVE-2023-43267 entry describes a cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14, where an attacker can inject a crafted payload into the title field to execute arbitrary web scripts or HTML. Connected sources corroborate the affected software/ver...

emlog Cross-Site Scripting Vulnerability

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in emlog pro version v2.1.14, which originated from a vulnerability that allows attackers to execute arbitrary web script or HTML via a specially crafted payload injected into the...

CVE-2023-43267

A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...

PT-2023-28749 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro version 2.1.14 Description: A cross-site scripting XSS issue in the publish article function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field. Recommendations: For emlog p...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

emlog 代码问题漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. emlog pro v2.1.15 and previous versions of the existence of a deserialization vulnerability, the vulnerability stems from the application in the receipt of user-submitted serialized data insecure deserialization process, a...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

CVE-2023-43291

CVE-2023-43291 describes a deserialization of untrusted data vulnerability in the emlog pro. v2.1.15 and earlier, exploitable via the cache.php component to achieve remote code execution. Multiple connected sources (Red Hat, CNVD, CNNVD, OSV, NVD, CVE listing) consistently cite deserialization of...

PT-2023-28762 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.1.15 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the cache.php component due to deserialization of untrusted data. Recommendations: For emlog pro versions 2.1.15 and earlier, ...