967 matches found
CVE-2023-44973
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-43267
A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...
Cross site scripting
A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...
CVE-2023-43267
The CVE-2023-43267 entry describes a cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14, where an attacker can inject a crafted payload into the title field to execute arbitrary web scripts or HTML. Connected sources corroborate the affected software/ver...
CVE-2023-43267
A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...
emlog Cross-Site Scripting Vulnerability
emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in emlog pro version v2.1.14, which originated from a vulnerability that allows attackers to execute arbitrary web script or HTML via a specially crafted payload injected into the...
CVE-2023-43267
A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...
CVE-2023-43267
A cross-site scripting XSS vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field...
PT-2023-28749 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: emlog pro version 2.1.14 Description: A cross-site scripting XSS issue in the publish article function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field. Recommendations: For emlog p...
CVE-2023-43291
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...
CVE-2023-43291
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...
emlog 代码问题漏洞
emlog is a PHP and MySQL based CMS builder for emlog personal developers. emlog pro v2.1.15 and previous versions of the existence of a deserialization vulnerability, the vulnerability stems from the application in the receipt of user-submitted serialized data insecure deserialization process, a...
CVE-2023-43291
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...
PT-2023-28762 · Emlog Pro · Emlog Pro
Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.1.15 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the cache.php component due to deserialization of untrusted data. Recommendations: For emlog pro versions 2.1.15 and earlier, ...
CVE-2023-43291
CVE-2023-43291 describes a deserialization of untrusted data vulnerability in the emlog pro. v2.1.15 and earlier, exploitable via the cache.php component to achieve remote code execution. Multiple connected sources (Red Hat, CNVD, CNNVD, OSV, NVD, CVE listing) consistently cite deserialization of...
CVE-2023-43291
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...
CVE-2023-43291
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...
emlog SQL Injection Vulnerability
emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...