CVE-2023-41623

Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php...

CVE-2023-41623

CVE-2023-41623 affects Emlog pro2.1.14, where a SQL injection is exposed via the uid parameter in /admin/media.php. The NVD entry lists a CVSS v3.1 base score of 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required as HIGH; impacts are confidentiality, integrity, ...