emlog EMalbum 3.1.1 /content/plugins/kl_album/kl_album_ajax_do.php 文件上传漏洞

No description provided by source...

emlog background author rights to SQL injection-vulnerability warning-the black bar safety net

Honestly, don't want to dig the web vulnerabilities, and also don't want to send this article, the web of things engage to engage in play that's like, I already don't want to go deep, to think who I like to put a cms analysis was thorough. I sometimes just pan-pan, pan-pan to get some simple...

emlog code reuse vulnerability, password blasting and other impact-vulnerability warning-the black bar safety net

Brief description: emlog code reuse. You can ignore the CAPTCHA brush comments, ignoring the code to brute force the background. Detailed description: See two days emlog source code is also not white to see it. In the comment when the service side validation of the data code as follows:...

EMLOG offline writing high-risk security vulnerabilities-vulnerability warning-the black bar safety net

You emlog user, EMLOG Development Group today confirmed EMLOG 5.1 series of versions exist offline writing interface permission validation is not strict, high-risk vulnerabilities. The vulnerability can lead an attacker can bypass the system user authentication mechanism through the offline writi...

emlog 5.0.1 xmlrpc.php 后门漏洞

emlog是一款流行的个人博客系统，其5.0.1版本存在后门文件，攻击者利用后门可以控制网站。 emlog 5.0.1...

emlog the background to get webshell each version through the kill-a vulnerability warning-the black bar safety net

Recently mood has been bad, it got a blog play. Online looking for a bit found emlog operation, the interface can also, download it down. Into the background to see it get a webshell as if there is nothing way, online also Baidu for a moment did not see the new take the shell method, there is a...

emlog 4.1.0 敏感信息泄漏漏洞

emlog是一款基于PHP和MySQL平台的功能强大的个人博客系统blog，该版本存在敏感信息泄漏的漏洞。 泄露作者名称： http://site/content/cache/user 泄露配置信息 http://site/content/cache/options 漏洞证明 修复方案： 升级最新官方版本，官方链接：www.emlog.net...