CVE-2020-21013

emlog v6.0.0 contains a SQL injection via /admin/comment.php...

Arbitrary file deletion

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

Sql injection

emlog v6.0.0 contains a SQL injection via /admin/comment.php...

CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...

CVE-2020-21014

CVE-2020-21014 affects emlog v6.0.0. The vulnerability is an arbitrary file deletion flaw in admin/plugin.php, arising from insufficient access restriction in the plugin deletion logic. Impact stated in sources is the ability to delete arbitrary files on the server. No exploit vectors or exploit ...

CVE-2020-21013

emlog v6.0.0 contains a SQL injection via /admin/comment.php...

CVE-2020-21013

CVE-2020-21013 affects the Emlog CMS (version 6.0.0). The vulnerability is a SQL injection in the admin/comment.php component, arising from improper handling of user-controlled input. Impact is reported as potential exposure of sensitive data (information disclosure) and partial integrity/availab...

Emlog SQL注入漏洞

Emlog is a PHP and MySQL based CMS builder from Emlog's personal developers. version 6.0.0 of Emlog is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to obtain sensitive information...

Emlog 授权问题漏洞

Emlog is a PHP and MySQL based CMS builder for Emlog personal developers. A license issue vulnerability exists in Emlog, which stems from the product's lack of an effective restriction added to the admin/plugin.php file deletion feature. An attacker can exploit this vulnerability to delete...

CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

Cross site request forgery (csrf)

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

CVE-2020-21321

The CVE-2020-21321 entry concerns emlog v6.0 and describes a Cross-Site Request Forgery (CSRF) vulnerability on the endpoint /admin/link.php?action=addlink, which enables attackers to arbitrarily add articles. The connected documents confirm this CSRF issue, but do not provide explicit root-cause...

CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery CSRF via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles...

emlog 跨站请求伪造漏洞

Emlog is Emlog personal developer of a PHP and MySQL based CMS site building system . There is a security vulnerability in emlog v6.0 that can be exploited by attackers to add articles at will...

Arbitrary file deletion vulnerability in emlog (CNVD-2021-41633)

emlog is short for every memory log, a PHP and MySQL based blog and CMS builder. There is an arbitrary file deletion vulnerability in emlog. An attacker can exploit this vulnerability to delete arbitrary files...

emlog SQL Injection Vulnerability

emlog is a powerful blog and CMS builder based on PHP and MySQL. A SQL injection vulnerability exists in emlog version 6.0.0-stable. An attacker can exploit this vulnerability to execute arbitrary SQL statements and query sensitive server data via admin/navbar.php?action=addpage...

CVE-2021-30081

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...

CVE-2021-30081

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...

Sql injection

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...