Lucene search
+L

543 matches found

OSV
OSV
•added 2024/12/20 6:31 p.m.•14 views

CVE-2024-12841 Emlog Pro tag.php cross site scripting

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

6.9CVSS3.8AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•4 views

CVE-2024-12843: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclos...

6.9CVSS3.8AI score0.00371EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•25 views

PT-2024-17762 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions up to 2.4.1 Description: A problem has been found in Emlog Pro that affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be...

6.9CVSS4.6AI score0.00371EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•19 views

PT-2024-17760 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions up to 2.4.1 Description: A problem has been found in Emlog Pro that affects an unknown part of the file /admin/tag.php. The manipulation of the keyword argument leads to cross site scripting. It is possible to initiate the...

6.9CVSS4.6AI score0.00386EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•5 views

CVE-2024-12844: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.1. Affected is an unknown function of the file /admin/store.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the...

6.9CVSS3.9AI score0.0041EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•6 views

CVE-2024-12842: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/user.php. The manipulation of the argument keyword leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclose...

6.9CVSS3.8AI score0.00406EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•7 views

CVE-2024-12841: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclose...

6.9CVSS3.9AI score0.00386EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•14 views

PT-2024-17761 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions up to 2.4.1 Description: A vulnerability was found in Emlog Pro, affecting unknown code of the file /admin/user.php. The manipulation of the keyword argument leads to cross-site scripting. The attack can be initiated...

6.9CVSS4.3AI score0.00406EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
•added 2024/12/20 12:00 a.m.•18 views

PT-2024-17763 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro versions up to 2.4.1 Description: A problematic vulnerability has been found in Emlog Pro, affecting an unknown function of the file /admin/store.php. The manipulation of the argument tag leads to cross site scripting. It is possibl...

6.9CVSS4.6AI score0.0041EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•6 views

CVE-2024-12845: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Emlog Pro up to 2.4.1. Affected by this vulnerability is an unknown functionality in the library /include/lib/common.php. The manipulation of the argument msg leads to cross site scripting. The attack can be launched remotely. The exploit has...

6.1CVSS3.8AI score0.00379EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/15 5:15 p.m.•36 views

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

5.4CVSS0.00373EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•15 views

PT-2024-34383 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.3.18 and earlier Description: The issue allows attackers to write malicious JavaScript code in published articles, potentially leading to Cross Site Scripting XSS attacks. Recommendations: For emlog pro versions 2.3.18 an...

5.4CVSS6.4AI score0.00373EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/11/15 12:00 a.m.•55 views

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

0.00373EPSS
SaveExploits1References2
CVE
CVE
•added 2024/11/15 12:00 a.m.•73 views

CVE-2024-50655

CVE-2024-50655 affects emlog pro versions

5.4CVSS6.6AI score0.00373EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/15 12:00 a.m.•13 views

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

6.6AI score0.00373EPSS
SaveExploits1References2
OSV
OSV
•added 2024/11/15 12:00 a.m.•29 views

CVE-2024-50655

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

5.4CVSS6.5AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•6 views

CVE-2024-50655: Improper Neutralization of Input During Web Page Generation

emlog pro =2.3.18 is vulnerable to Cross Site Scripting XSS, which allows attackers to write malicious JavaScript code in published articles...

5.4CVSS5.7AI score0.00373EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/30 5:15 p.m.•28 views

CVE-2024-46540

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

6.3CVSS0.0073EPSS
SaveExploits1References3
Mend
Mend
•added 2024/09/30 12:00 a.m.•4 views

CVE-2024-46540

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

8.3CVSS0.0073EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/30 12:00 a.m.•3 views

CVE-2024-46540: Incorrect Privilege Assignment

A remote code execution RCE vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges...

6.3CVSS6.2AI score0.0073EPSS
SaveExploits1References1
Rows per page
Query Builder