CVE-2020-19028

File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function...

CVE-2020-19028

Emlog EmlogCMS v6.0.0 has a file-upload vulnerability in /admin/plugin.php that allows remote attackers to access sensitive information (CVE-2020-19028). Underlying issue is improper handling of uploaded files leading to confidentiality impact (C:H). CVSS: 3.1, base score 7.5. No exploit details ...