CVE-2023-37049

CVE-2023-37049 affects emlog 2.1.9, where an Arbitrary file deletion vulnerability exists via the admin/template.php endpoint. The connected sources confirm the affected software and the underlying issue (unauthorized deletion of files through a web-accessible admin path). No concrete exploit det...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

emlog 安全漏洞

emlog is a PHP and MySQL based CMS builder for personal developers of emlog. A security vulnerability exists in version 2.1.9 of emlog, which stems from the ease of deleting arbitrary files via admin emplate.php...

PT-2023-25771 · Emlog · Emlog

Name of the Vulnerable Software and Affected Versions: emlog version 2.1.9 Description: The issue allows for Arbitrary file deletion via the admintemplate.php file. Recommendations: For emlog version 2.1.9, consider restricting access to the admintemplate.php file to minimize the risk of...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

CVE-2023-37049

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...

emlog code issue vulnerability (CNVD-2023-65131)

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A code issue vulnerability exists in emlog version 6.0.0, which stems from a file upload vulnerability in /admin/plugin.php. An attacker can exploit this vulnerability to elevate privileges...

emlog 代码问题漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A code issue vulnerability exists in emlog version 6.0.0, which stems from a file upload vulnerability in /admin/plugin.php. An attacker can exploit this vulnerability to elevate privileges...

CVE-2020-19028

Emlog EmlogCMS v6.0.0 has a file-upload vulnerability in /admin/plugin.php that allows remote attackers to access sensitive information (CVE-2020-19028). Underlying issue is improper handling of uploaded files leading to confidentiality impact (C:H). CVSS: 3.1, base score 7.5. No exploit details ...

PT-2023-11511 · Unknown · Emlog Emlogcms

Name of the Vulnerable Software and Affected Versions: Emlog EmlogCMS version 6.0.0 Description: A remote attacker can gain access to sensitive information via the "/admin/plugin.php" function. This issue allows unauthorized access, potentially leading to data breaches. Recommendations: For Emlog...

Emlog Cross-Site Scripting Vulnerability (CNVD-2023-36305)

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in Emlog Pro v2.0.3. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary We...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

Cross site scripting

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

Emlog 跨站脚本漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. A cross-site scripting vulnerability exists in Emlog Pro v2.0.3. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary We...

CVE-2023-30338

CVE-2023-30338 affects Emlog Pro v2.0.3. Multiple stored XSS vulnerabilities allow attackers to execute arbitrary web scripts or HTML through crafted payloads in Article Title or Article Summary fields. Root cause cited across sources is lack of proper filtering/escaping of user input. Impact des...

PT-2023-22642 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.0.3 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters. This enables the execution of malicious scripts,...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

CVE-2023-30338

Multiple stored cross-site scripting XSS vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters...

Cross-site scripting vulnerability exists in emlog

emlog is a PHP and MySQL-based CMS builder for the individual developers of emlog. emlog has a security vulnerability that originates from an unknown function in admin/articlesave.php, which can be exploited by attackers to cause cross-site scripting XSS by manipulating the parameter tag...