1218 matches found
Emlog 安全漏洞
Emlog is a PHP and MySQL based CMS builder by the individual developers of Emlog. A security vulnerability exists in Emlog, which is caused by a failure of the product's admin emplate.php to adequately validate user uploaded zip files. The vulnerability can be exploited to obtain a shell, the...
PT-2021-10654
Name of the Vulnerable Software and Affected Versions: emlog version 6.0 Description: The issue is related to a vulnerability in the admintemplate.php component, which can be exploited by attackers to gain access via a crafted Zip file. Recommendations: For emlog version 6.0, update to a newer...
CVE-2020-21654: Undefined Security Weakness
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file...
CVE-2020-21013
emlog v6.0.0 contains a SQL injection via /admin/comment.php...
CVE-2020-21013
emlog v6.0.0 contains a SQL injection via /admin/comment.php...
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
Sql injection
emlog v6.0.0 contains a SQL injection via /admin/comment.php...
Arbitrary file deletion
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
CVE-2020-21014
CVE-2020-21014 affects emlog v6.0.0. The vulnerability is an arbitrary file deletion flaw in admin/plugin.php, arising from insufficient access restriction in the plugin deletion logic. Impact stated in sources is the ability to delete arbitrary files on the server. No exploit vectors or exploit ...
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
CVE-2020-21013
emlog v6.0.0 contains a SQL injection via /admin/comment.php...
CVE-2020-21013
CVE-2020-21013 affects the Emlog CMS (version 6.0.0). The vulnerability is a SQL injection in the admin/comment.php component, arising from improper handling of user-controlled input. Impact is reported as potential exposure of sensitive data (information disclosure) and partial integrity/availab...
CVE-2020-21013
emlog v6.0.0 contains a SQL injection via /admin/comment.php...
Emlog 授权问题漏洞
Emlog is a PHP and MySQL based CMS builder for Emlog personal developers. A license issue vulnerability exists in Emlog, which stems from the product's lack of an effective restriction added to the admin/plugin.php file deletion feature. An attacker can exploit this vulnerability to delete...
CVE-2020-21014: Undefined Security Weakness
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php...
PT-2021-10574
Name of the Vulnerable Software and Affected Versions: emlog version 6.0.0 Description: The issue is a SQL injection that can be exploited via the /admin/comment.php API endpoint. This allows for potential unauthorized access or manipulation of database content. Recommendations: For emlog version...
PT-2021-10575
Name of the Vulnerable Software and Affected Versions: emlog version 6.0.0 Description: The issue concerns an arbitrary file deletion vulnerability. It is located in the admin/plugin.php file. Recommendations: For emlog version 6.0.0, at the moment, there is no information about a newer version...