Sql injection

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

PT-2023-26791

Name of the Vulnerable Software and Affected Versions emlog version 2.1.9 Description A SQL injection issue was discovered in emlog via the "/admin/user.php" API endpoint. This allows for potential exploitation. Recommendations For emlog version 2.1.9, consider restricting access to the...

CVE-2023-39121

CVE-2023-39121 affects emlog version 2.1.9. A SQL injection vulnerability exists in emlog’s admin/user.php handling and also, per the Nuclei template, in the data backup/restore functionality due to unsanitized input. Impact: attackers with admin credentials could potentially execute arbitrary SQ...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

emlog SQL注入漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

Arbitrary file deletion

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

PT-2023-25771 · Emlog · Emlog

Name of the Vulnerable Software and Affected Versions: emlog version 2.1.9 Description: The issue allows for Arbitrary file deletion via the admintemplate.php file. Recommendations: For emlog version 2.1.9, consider restricting access to the admintemplate.php file to minimize the risk of...

CVE-2023-37049

CVE-2023-37049 affects emlog 2.1.9, where an Arbitrary file deletion vulnerability exists via the admin/template.php endpoint. The connected sources confirm the affected software and the underlying issue (unauthorized deletion of files through a web-accessible admin path). No concrete exploit det...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS builder for personal developers of emlog. A security vulnerability exists in version 2.1.9 of emlog, which stems from the ease of deleting arbitrary files via admin emplate.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

emlog code issue vulnerability (CNVD-2023-65131)

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A code issue vulnerability exists in emlog version 6.0.0, which stems from a file upload vulnerability in /admin/plugin.php. An attacker can exploit this vulnerability to elevate privileges...

emlog 代码问题漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A code issue vulnerability exists in emlog version 6.0.0, which stems from a file upload vulnerability in /admin/plugin.php. An attacker can exploit this vulnerability to elevate privileges...

CVE-2020-19028

Emlog EmlogCMS v6.0.0 has a file-upload vulnerability in /admin/plugin.php that allows remote attackers to access sensitive information (CVE-2020-19028). Underlying issue is improper handling of uploaded files leading to confidentiality impact (C:H). CVSS: 3.1, base score 7.5. No exploit details ...

PT-2023-11511 · Unknown · Emlog Emlogcms

Name of the Vulnerable Software and Affected Versions: Emlog EmlogCMS version 6.0.0 Description: A remote attacker can gain access to sensitive information via the "/admin/plugin.php" function. This issue allows unauthorized access, potentially leading to data breaches. Recommendations: For Emlog...