1218 matches found
CVE-2025-25827
A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...
CVE-2025-25825: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Titile in the article category section...
CVE-2025-25823
Emlog Pro v2.5.4 is vulnerable to a cross-site scripting (XSS) vulnerability originating from the /admin/article.php file. An attacker can execute arbitrary web scripts or HTML by injecting a crafted payload into the article header . This vulnerability is classified as CWE-79: Improper Neutraliza...
CVE-2025-25783: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via uploading a crafted Zip file...
PT-2025-8726
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.4 Description A Server-Side Request Forgery SSRF issue in the sort.php component allows attackers to scan local and internal ports by supplying a crafted URL. Recommendations For Emlog Pro version 2.5.4, update to a newer...
PT-2025-8724
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.4 Description A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the article header at the "/admin/article.php" API endpoint. Recommendations For...
CVE-2025-25823
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...
PT-2025-8708
Name of the Vulnerable Software and Affected Versions Emlog Pro version 2.5.3 Description The issue is related to an arbitrary file upload vulnerability in the admin/plugin.php component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted Zip file. Recommendation...
CVE-2025-25825
A cross-site scripting (XSS) vulnerability exists in Emlog Pro v2.5.4 , a PHP and MySQL based CMS website builder. The flaw allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Titile field within the article category section. This vulnerability is cha...
CVE-2025-25827
A Server-Side Request Forgery SSRF in the component sort.php of Emlog Pro v2.5.4 allows attackers to scan local and internal ports via supplying a crafted URL...
emlog 安全漏洞
emlog is a PHP and MySQL based CMS website builder for emlog personal developers. A security vulnerability exists in emlog Pro version v2.5.4, which originates from the postStrVar function in articlesave.php and is vulnerable to cross-site scripting attacks...
CVE-2025-25823: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...
CVE-2025-25818
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at articlesave.php...
CVE-2025-25818
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at articlesave.php...
emlog 安全漏洞
emlog is a PHP and MySQL based CMS website builder for emlog personal developers. A security vulnerability exists in emlog Pro v2.5.4, which originates from the /admin/article.php file and is susceptible to cross-site scripting attacks...
emlog 安全漏洞
emlog is a PHP and MySQL based CMS builder. A file upload vulnerability exists in emlog version v2.5.3, which stems from a lack of validation of uploaded files by the adminplugin.php component. An attacker can exploit this vulnerability to upload malicious files and remotely execute arbitrary cod...
CVE-2025-25818: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the postStrVar function at articlesave.php...
CVE-2025-25818
A cross-site scripting (XSS) vulnerability exists in Emlog Pro v2.5.4 , a PHP and MySQL-based CMS website builder. The flaw originates from the postStrVar function located in article_save.php , where an attacker can inject a crafted payload to execute arbitrary web scripts or HTML. While the secu...
CVE-2025-25823
A cross-site scripting XSS vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the article header at /admin/article.php...