CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

emlog 代码问题漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. emlog pro v2.1.15 and previous versions of the existence of a deserialization vulnerability, the vulnerability stems from the application in the receipt of user-submitted serialized data insecure deserialization process, a...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

PT-2023-28762 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.1.15 and earlier Description: The issue allows a remote attacker to execute arbitrary code via the cache.php component due to deserialization of untrusted data. Recommendations: For emlog pro versions 2.1.15 and earlier, ...

CVE-2023-43291

CVE-2023-43291 describes a deserialization of untrusted data vulnerability in the emlog pro. v2.1.15 and earlier, exploitable via the cache.php component to achieve remote code execution. Multiple connected sources (Red Hat, CNVD, CNNVD, OSV, NVD, CVE listing) consistently cite deserialization of...

CVE-2023-43291

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component...

emlog SQL Injection Vulnerability

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

Sql injection

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

PT-2023-26791

Name of the Vulnerable Software and Affected Versions emlog version 2.1.9 Description A SQL injection issue was discovered in emlog via the "/admin/user.php" API endpoint. This allows for potential exploitation. Recommendations For emlog version 2.1.9, consider restricting access to the...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

emlog SQL注入漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...

CVE-2023-39121

CVE-2023-39121 affects emlog version 2.1.9. A SQL injection vulnerability exists in emlog’s admin/user.php handling and also, per the Nuclei template, in the data backup/restore functionality due to unsanitized input. Impact: attackers with admin credentials could potentially execute arbitrary SQ...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

CVE-2023-39121

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

Arbitrary file deletion

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...