CVE-2022-1526

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

Cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

CVE-2022-1526

The CVE-2022-1526 entry affects Emlog Pro up to version 1.2.2, where the vulnerability lies in POST parameter handling for articles. An attacker who can sign up and log in can craft input (examples show ) that leads to cross-site scripting (XSS). Public disclosures exist, and exploitation has bee...

CVE-2022-1526

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

CVE-2022-1526 Emlog Pro POST Parameter cross site scripting

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input alert1; leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login ...

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS website building system. A security vulnerability exists in Emlog Pro version 1.2.2 and earlier, which can be exploited by a registered and logged-in attacker to launch cross-site scripting attacks...

CVE-2022-1526: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login by the...

PT-2022-13930

Name of the Vulnerable Software and Affected Versions Emlog Pro versions up to 1.2.2 Description A problematic issue was found in the POST parameter handling of articles, allowing for cross-site scripting when an attacker manipulates the input with malicious scripts, such as alert1;. The attack c...

Emlog Cross-Site Scripting Vulnerability (CNVD-2022-11528)

Emlog is a PHP and MySQL-based CMS website builder from Emlog personal developers. Emlog suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could use this vulnerability to execute JavaScript code ...

CVE-2022-23379

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

CVE-2022-23379

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

Sql injection

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

CVE-2022-23379

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

CVE-2022-23379

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

CVE-2022-23379

Affected software: Emlog v6.0. Vulnerability: SQL injection via the $TagID parameter of the function getblogidsfromtagid(). Root cause / details: The CVE entry identifies a SQL injection vulnerability in Emlog v6.0; no additional technical specifics (e.g., exact query, parameter handling) are pro...

CVE-2022-23379

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

CVE-2022-23379: Improper Neutralization of Special Elements used in an SQL Command

Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

Emlog SQL注入漏洞

Emlog is a PHP and MySQL based CMS website builder by the individual developer of Emlog. Emlog has a SQL injection vulnerability, which originates from the discovery that Emlog v6.0 contains a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...