CVE-2021-31737

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

CVE-2021-31737

CVE-2021-31737 affects emlog v5.3.1 and v6.0.0. Description across Red Hat, CNVD, NVD and CNVD confirms a Remote Code Execution vulnerability caused by uploading a database backup file via admin/data.php. The root cause is the handling of uploaded database backups leading to code execution on the...

PT-2021-19485

Name of the Vulnerable Software and Affected Versions emlog versions 5.3.1 through 6.0.0 Description The issue is related to a Remote Code Execution vulnerability. This vulnerability is due to the upload of a database backup file in the admin/data.php file. Recommendations For emlog version 5.3.1...

Emlog 代码问题漏洞

emlog is a powerful blog and CMS builder based on PHP and MySQL. A remote code execution vulnerability exists in emlog versions 5.3.1, 6.0.0. The vulnerability stems from uploading a database backup file in admin/data.php. An attacker can exploit this vulnerability to achieve remote code executio...

CVE-2021-31737: Unrestricted Upload of File with Dangerous Type

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868: Improper Limitation of a Pathname to a Restricted Directory

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

PT-2019-14839

Name of the Vulnerable Software and Affected Versions emlog versions prior to 6.0.0 Description The issue allows for arbitrary file deletion via an admin/data.php?action=dell all bak request. This is achieved by using directory traversal sequences in the bak parameter. Recommendations For version...