Lucene search
+L

1218 matches found

CNNVD
CNNVD
•added 2022/01/06 12:00 a.m.•17 views

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL-based blog and content knowledge management system that seeks a fast, stable, simple and comfortable website building experience. a cross-site scripting vulnerability exists in Emlog pro-1.0.7 and prior versions. The vulnerability stems from the fact that Emlog does not...

6.1CVSS5.4AI score0.00909EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/12/19 12:00 a.m.•56 views

emlog Remote Code Execution Vulnerability (CNVD-2021-101689)

Emlog is a PHP and MySQL-based CMS builder from the Emlog personal developer. Emlog in version 5.3.1 contains a remote code execution vulnerability that stems from the failure of a network system or product to properly filter special elements in the process of constructing code segments from...

9.8CVSS5.4AI score0.0307EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/14 7:15 p.m.•23 views

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

9.8CVSS7.5AI score
SaveExploits0References1
NVD
NVD
•added 2021/12/14 7:15 p.m.•26 views

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

9.8CVSS0.0307EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/12/14 7:15 p.m.•10 views

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

9.8CVSS7.5AI score0.0307EPSS
SaveExploits1References2
Prion
Prion
•added 2021/12/14 7:15 p.m.•28 views

Remote code execution

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

7.5CVSS9.6AI score0.0307EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/12/14 6:05 p.m.•3 views

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

9.8CVSS0.0307EPSS
SaveExploits1References1
CVE
CVE
•added 2021/12/14 6:05 p.m.•57 views

CVE-2021-40883

CVE-2021-40883 affects emlog 5.3.1, with a Remote Code Execution via content/plugins. The root cause is described as failure to properly filter special elements when constructing code segments from external input. The connected documents provide no explicit exploit details, affected versions beyo...

9.8CVSS9.6AI score0.0307EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/12/14 6:05 p.m.•37 views

CVE-2021-40883

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

9.9AI score0.0307EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/14 12:00 a.m.•10 views

CVE-2021-40883: Unrestricted Upload of File with Dangerous Type

A Remote Code Execution RCE vulnerability exists in emlog 5.3.1 via content/plugins...

9.8CVSS5.9AI score0.0307EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/14 12:00 a.m.•17 views

emlog 代码问题漏洞

Emlog is a PHP and MySQL-based CMS builder from the Emlog personal developer. Emlog in version 5.3.1 contains a remote code execution vulnerability that stems from the failure of a network system or product to properly filter special elements in the process of constructing code segments from...

9.8CVSS6.7AI score0.0307EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/14 12:00 a.m.•7 views

PT-2021-23001

Name of the Vulnerable Software and Affected Versions emlog version 5.3.1 Description A Remote Code Execution RCE issue exists via content/plugins, allowing for potential code execution. Recommendations For emlog version 5.3.1, at the moment, there is no information about a newer version that...

9.8CVSS0.0307EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/10/14 12:00 a.m.•79 views

Emlog Authorization Issues Vulnerabilities

Emlog is a PHP and MySQL based CMS builder for Emlog personal developers. A license issue vulnerability exists in Emlog, which stems from the product's lack of an effective restriction added to the admin/plugin.php file deletion feature. An attacker can exploit this vulnerability to delete...

5.5CVSS6.9AI score0.00952EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2021/10/14 12:00 a.m.•50 views

Emlog SQL Injection Vulnerability (CNVD-2021-90766)

Emlog is a PHP and MySQL based CMS builder from Emlog's personal developers. version 6.0.0 of Emlog is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to obtain sensitive information...

7.2CVSS4.8AI score0.00989EPSS
SaveExploits1References1
NVD
NVD
•added 2021/10/06 10:15 p.m.•31 views

CVE-2020-21654

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

7.2CVSS0.01102EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/06 10:15 p.m.•26 views

CVE-2020-21654

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

7.2CVSS6.6AI score
SaveExploits0References1
Prion
Prion
•added 2021/10/06 10:15 p.m.•27 views

Design/Logic Flaw

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

6.5CVSS6.7AI score0.01102EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/10/06 9:34 p.m.•69 views

CVE-2020-21654

Affected software: emlog v6.0. Vulnerability: A flaw in the admin\template.php component allows an attacker to obtain a shell by crafting a malicious ZIP file. This is linked to improper validation of uploaded ZIPs. Impact: Remote code execution with high severity potential due to arbitrary shell...

7.2CVSS6.7AI score0.01102EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/10/06 9:34 p.m.•3 views

CVE-2020-21654

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

8.6CVSS0.01102EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/10/06 9:34 p.m.•47 views

CVE-2020-21654

emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...

6.8AI score0.01102EPSS
SaveExploits1References1
Rows per page
Query Builder