8 matches found
CVE-2021-31737
emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...
CVE-2021-31737
CVE-2021-31737 affects emlog v5.3.1 and v6.0.0. Description across Red Hat, CNVD, NVD and CNVD confirms a Remote Code Execution vulnerability caused by uploading a database backup file via admin/data.php. The root cause is the handling of uploaded database backups leading to code execution on the...
Emlog code-related vulnerabilities
emlog is a powerful blog and CMS builder based on PHP and MySQL. A remote code execution vulnerability exists in emlog versions 5.3.1, 6.0.0. The vulnerability stems from uploading a database backup file in admin/data.php. An attacker can exploit this vulnerability to achieve remote code executio...
CVE-2021-31737: Unrestricted Upload of File with Dangerous Type
emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...
PT-2021-19485
Name of the Vulnerable Software and Affected Versions emlog versions 5.3.1 through 6.0.0 Description The issue is related to a Remote Code Execution vulnerability. This vulnerability is due to the upload of a database backup file in the admin/data.php file. Recommendations For emlog version 5.3.1...
CVE-2019-16868
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...
PT-2019-14839
Name of the Vulnerable Software and Affected Versions emlog versions prior to 6.0.0 Description The issue allows for arbitrary file deletion via an admin/data.php?action=dell all bak request. This is achieved by using directory traversal sequences in the bak parameter. Recommendations For version...
CVE-2019-16868: Improper Limitation of a Pathname to a Restricted Directory
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...