Lucene search
+L

957 matches found

CVE
CVE
added 2022/10/21 12:0 a.m.73 views

CVE-2022-42189

CVE-2022-42189 affects Emlog Pro 1.6.0 via the plugins upload functionality, described as a remote code execution (RCE) vulnerability. The CVSS 3.1 base score is 7.2 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: HIGH; no user interaction. The root cause and ex...

7.2CVSS7.4AI score0.01499EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/10/21 12:0 a.m.26 views

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

7.2CVSS7.9AI score
SaveExploits0References3
Cvelist
Cvelist
added 2022/10/21 12:0 a.m.37 views

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

7.6AI score0.01499EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2022/10/21 12:0 a.m.9 views

CVE-2022-42189

Emlog Pro 1.6.0 plugins upload suffers from a remote code execution RCE vulnerability...

7.5AI score0.01499EPSS
SaveExploits1References1
NVD
NVD
added 2022/06/09 1:15 p.m.23 views

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

5.4CVSS0.00417EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/09 1:15 p.m.6 views

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

5.4CVSS5.7AI score0.00417EPSS
SaveExploits1References1
Prion
Prion
added 2022/06/09 1:15 p.m.20 views

Cross site scripting

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

3.5CVSS5.3AI score0.00417EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/09 12:4 p.m.27 views

CVE-2021-40610

Emlog Pro v 1.0.4 cross-site scripting XSS in Emlog Pro background management...

5.5AI score0.00417EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/09 12:4 p.m.70 views

CVE-2021-40610

CVE-2021-40610 affects Emlog Pro v1.0.4, with a cross-site scripting (XSS) vulnerability in the Emlog Pro backend management interface. The connected documents confirm the affected product and the vulnerability class but do not provide details on the root cause (e.g., specific input handling, sto...

5.4CVSS5.3AI score0.00417EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/09 12:0 a.m.9 views

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS website builder by Emlog's personal developer. A security vulnerability exists in Emlog Pro v1.0.4, which stems from a cross-site scripting XSS issue in the Emlog Pro backend administration...

5.4CVSS5.4AI score0.00417EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/05/16 12:0 a.m.21 views

Emlog Cross-Site Scripting Vulnerability (CNVD-2022-68881)

Emlog is a PHP and MySQL based CMS website building system. A security vulnerability exists in Emlog Pro version 1.2.2 and earlier, which can be exploited by a registered and logged-in attacker to launch cross-site scripting attacks...

3.5CVSS2.5AI score0.00574EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2022/04/29 8:15 a.m.18 views

CVE-2022-1526

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

5.4CVSS0.00574EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/29 8:15 a.m.21 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

3.5CVSS5.2AI score0.00574EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/29 7:40 a.m.29 views

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

3.5CVSS5.4AI score0.00574EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/04/29 7:40 a.m.10 views

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

3.5CVSS5.4AI score0.00574EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/29 7:40 a.m.68 views

CVE-2022-1526

The CVE-2022-1526 entry affects Emlog Pro up to version 1.2.2, where the vulnerability lies in POST parameter handling for articles. An attacker who can sign up and log in can craft input (examples show ) that leads to cross-site scripting (XSS). Public disclosures exist, and exploitation has bee...

5.4CVSS4.3AI score0.00574EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/04/29 7:40 a.m.16 views

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

3.5CVSS4AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/29 12:0 a.m.8 views

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS website building system. A security vulnerability exists in Emlog Pro version 1.2.2 and earlier, which can be exploited by a registered and logged-in attacker to launch cross-site scripting attacks...

5.4CVSS5.2AI score0.00574EPSS
SaveExploits0References3
CNVD
CNVD
added 2022/02/10 12:0 a.m.62 views

Emlog Cross-Site Scripting Vulnerability (CNVD-2022-11528)

Emlog is a PHP and MySQL-based CMS website builder from Emlog personal developers. Emlog suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could use this vulnerability to execute JavaScript code ...

4.8CVSS3.1AI score0.00617EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/02/04 11:15 p.m.11 views

CVE-2022-23379

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

9.8CVSS7.4AI score0.01374EPSS
SaveExploits1References2
Rows per page
Query Builder