CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

Arbitrary file deletion

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868

Emlog (up to 6.0.0beta) is vulnerable to arbitrary file deletion via admin/data.php?action=dell_all_bak with directory traversal in bak[]. This can delete arbitrary files. Confirmed by CVE-2019-16868 entries (NVD, Red Hat). CVSSv3.1 base score 9.8 (CRITICAL): Network-based, no auth, no user inter...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

Arbitrary file deletion vulnerability in emlog v6.0.0 backend b****.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. The emlog v6.0.0 backend b.php page has an arbitrary file deletion vulnerability...

SQL Injection Vulnerability in emlog v5.3.1 Backend ta***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. emlog v5.3.1 SQL injection vulnerability exists in the backend ta.php page, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in emlog v6.0.0 Backend na***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend na.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in emlog v6.0.0 Backend co***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend co.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in emlog v6.0.0 backend te***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend te.php page. An attacker can exploit the vulnerability to elevate background privileges...

File upload vulnerability in emlog v6.0.0 backend pl***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend pl.php page. An attacker can exploit the vulnerability to elevate background privileges...

SQL Injection Vulnerability in emlog v6.0.0 Backend wi***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend wi.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

emlog has an arbitrary file deletion vulnerability

emlog is a functional blog and CMS builder based on PHP and MySQL. There is an arbitrary file deletion vulnerability in emlog. The vulnerability is caused by the program does not filter the template deletion function , an attacker can use the vulnerability to delete arbitrary files on the server...

CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

Cross site request forgery (csrf)

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

CVE-2018-18316

Affected software: emlog. Vulnerability: CSRF via the admin/user.php?action=new URI in emlog v6.0.0. Root cause/impact: CSRF could allow unauthorized actions; the connected documents only state the CSRF issue with that URI and do not provide deeper technical specifics, affected modules beyond adm...

CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

Logic Design Vulnerability in Emlog CMS

Emlog, short for every memory log, is a PHP and MySQL based blog and CMS builder. A logical design vulnerability exists in Emlog CMS. An attacker can exploit the vulnerability to obtain sensitive information...

Code Execution Vulnerability in Emlog CMS

Emlog, short for every memory log, is a PHP and MySQL based blog and CMS builder. A code execution vulnerability exists in Emlog CMS. An attacker can use the vulnerability to obtain the physical path of the website, so as to backup and modify the database information, and realize the getshell by...