EUVD-2024-51147

Malicious code in bioql PyPI...

CVE-2024-12846

A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-12846: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The...

CVE-2024-36674

LyLmespage v1.9.5 is vulnerable to Cross Site Scripting XSS via admin/link.php...

CVE-2024-36674

LyLmespage v1.9.5 is vulnerable to Cross Site Scripting XSS via admin/link.php...

CVE-2024-36674: Improper Neutralization of Input During Web Page Generation

LyLmespage v1.9.5 is vulnerable to Cross Site Scripting XSS via admin/link.php...

CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

CVE-2020-21321: Cross-Site Request Forgery (CSRF)

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

PT-2021-10609

Name of the Vulnerable Software and Affected Versions: emlog version 6.0 Description: The issue allows attackers to perform a Cross-Site Request Forgery CSRF attack via the "/admin/link.php?action=addlink" API endpoint, enabling them to arbitrarily add articles. Recommendations: For emlog version...