CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

Cross site request forgery (csrf)

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

CVE-2018-18316

Affected software: emlog. Vulnerability: CSRF via the admin/user.php?action=new URI in emlog v6.0.0. Root cause/impact: CSRF could allow unauthorized actions; the connected documents only state the CSRF issue with that URI and do not provide deeper technical specifics, affected modules beyond adm...

CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

PT-2018-14400

Name of the Vulnerable Software and Affected Versions emlog version 6.0.0 Description The issue allows for CSRF via the admin/user.php?action=new URI. Recommendations For emlog version 6.0.0, update to a newer version that contains a fix for this issue...

CVE-2018-18316: Cross-Site Request Forgery (CSRF)

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI...

Logic Design Vulnerability in Emlog CMS

Emlog, short for every memory log, is a PHP and MySQL based blog and CMS builder. A logical design vulnerability exists in Emlog CMS. An attacker can exploit the vulnerability to obtain sensitive information...

Code Execution Vulnerability in Emlog CMS

Emlog, short for every memory log, is a PHP and MySQL based blog and CMS builder. A code execution vulnerability exists in Emlog CMS. An attacker can use the vulnerability to obtain the physical path of the website, so as to backup and modify the database information, and realize the getshell by...

Arbitrary file deletion vulnerability in emlog version 5.3.1

emlog is a powerful blog and CMS builder based on PHP and MySQL. An arbitrary file deletion vulnerability exists in emlog version 5.3.1. The vulnerability is caused by the program not filtering parameters. An attacker can use this vulnerability to delete arbitrary files or directories...

Emlog blog system has an arbitrary file deletion vulnerability

emlog is a PHP and MySQL based blog and CMS builder. There is an arbitrary file deletion vulnerability in the Emlog blog system. The vulnerability is due to the program on the parameters of the filter is not strict due to the attacker by adding a malicious payload execution, you can delete...

emlog 5.3.1 arbitrary delete vulnerability of the three

No description provided by source...

emlog 5.3.1 arbitrary deletion of files(four)

No description provided by source...

emlog5. 3. 1 arbitrary file deletion

No description provided by source...

emlog 5.3.1 any deleted file-2

No description provided by source...

XSS Vulnerability in Emlog Blog System

emlog 5.3.1 is a PHP and MySQL based blog and CMS builder. An XSS vulnerability exists in the Emlog blog system. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...

emlog personal blog system background there is privilege elevation vulnerability

Impact version emlog = 5.1.2 Prerequisites: need to log in the background Exploit Log in the background after a visit to admin/? action=phpinfo page, get website physical path In the database backup page to back up the database, export to a local computer, and then edit the exported . sql format ...

Elevation of Privilege Vulnerability in the background of emlog personal blog system

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A privilege elevation vulnerability exists in the background /src/admin/data.php page of the emlog personal blog system. An attacker can exploit the vulnerability to elevate privileges by importing files...

Emlog personal blog system exists arbitrary file deletion vulnerability

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. The /src/admin/data.php page of the emlog personal blog system has an arbitrary file deletion vulnerability. As Bak fails to bring in the unlink function directly after the restriction, allowing an attacker to delete...

Multiple stored cross-site scripting vulnerabilities in emlog

emlog is a functional blog and CMS builder based on PHP and MySQL. There are multiple stored cross-site scripting vulnerabilities in emlog. The stored XSS vulnerabilities are caused due to the emlog 6.9 open source software code writing process, some of which fails to do input filtering...