973 matches found
CVE-2019-17073
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...
Directory traversal
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...
CVE-2019-17073
CVE-2019-17073 affects emlog up to version 6.0.0beta. The vulnerability arises from a directory traversal in admin/template.php, where an authenticated remote user can abuse the tpl parameter (tpl=../) to delete arbitrary files. Impact is partial confidentiality? Actually deletion of arbitrary fi...
CVE-2019-17073
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...
CVE-2019-16868
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...
CVE-2019-16868
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...
Arbitrary file deletion
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...
CVE-2019-16868
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...
CVE-2019-16868
Emlog (up to 6.0.0beta) is vulnerable to arbitrary file deletion via admin/data.php?action=dell_all_bak with directory traversal in bak[]. This can delete arbitrary files. Confirmed by CVE-2019-16868 entries (NVD, Red Hat). CVSSv3.1 base score 9.8 (CRITICAL): Network-based, no auth, no user inter...
Arbitrary file deletion vulnerability in emlog v6.0.0 backend b****.php page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. The emlog v6.0.0 backend b.php page has an arbitrary file deletion vulnerability...
SQL Injection Vulnerability in emlog v5.3.1 Backend ta***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. emlog v5.3.1 SQL injection vulnerability exists in the backend ta.php page, which can be exploited by attackers to obtain sensitive database information...
SQL Injection Vulnerability in emlog v6.0.0 Backend wi***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend wi.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
File upload vulnerability in emlog v6.0.0 backend te***.php page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend te.php page. An attacker can exploit the vulnerability to elevate background privileges...
SQL Injection Vulnerability in emlog v6.0.0 Backend co***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend co.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in emlog v6.0.0 Backend na***.php Page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend na.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
File upload vulnerability in emlog v6.0.0 backend pl***.php page
Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend pl.php page. An attacker can exploit the vulnerability to elevate background privileges...
emlog has an arbitrary file deletion vulnerability
emlog is a functional blog and CMS builder based on PHP and MySQL. There is an arbitrary file deletion vulnerability in emlog. The vulnerability is caused by the program does not filter the template deletion function , an attacker can use the vulnerability to delete arbitrary files on the server...
CVE-2018-18316
emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...