CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

Path traversal

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

CVE-2021-3293

emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file...

CVE-2021-3293

Affected software: emlog v5.3.1. Vulnerability: full path disclosure in t/index.php, enabling an attacker to view the path to the webroot/file. Root cause/impact: information disclosure of the server’s filesystem structure; no explicit exploit details provided in the documents. Exploitation statu...

Emlog 路径遍历漏洞

emlog is a powerful blog and CMS builder based on PHP and MySQL. A path traversal vulnerability exists in t/index.php in emlog 5.3.1. An attacker can exploit this vulnerability to view the path to webroot/file...

PT-2021-19977 · Emlog · Emlog

Name of the Vulnerable Software and Affected Versions: emlog version 5.3.1 Description: The issue allows an attacker to see the path to the webroot/file due to a full path disclosure vulnerability in t/index.php. Recommendations: For emlog version 5.3.1, update to a newer version that contains a...

File upload vulnerability in emlog (CNVD-2020-47685)

emlog is short for every memory log, meaning: point and click memory. It is a powerful blog and CMS builder based on PHP and MySQL. There is a file upload vulnerability in emlog that can be exploited by attackers to upload malicious files and gain control of the server...

File upload vulnerability in emlog

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in emlog, which can be exploited by attackers to gain control of a web server...

SQL injection vulnerability in emlog backend wi***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. There is a SQL injection vulnerability in the backend wi.php page of emlog, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in emlog backend na***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. SQL injection vulnerability exists in the background na.php page of emlog, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in emlog backend co***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. There is a SQL injection vulnerability in the co.php page of emlog, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

Directory traversal

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

CVE-2019-17073

CVE-2019-17073 affects emlog up to version 6.0.0beta. The vulnerability arises from a directory traversal in admin/template.php, where an authenticated remote user can abuse the tpl parameter (tpl=../) to delete arbitrary files. Impact is partial confidentiality? Actually deletion of arbitrary fi...

CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

Arbitrary file deletion

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...