PT-2021-18596

Name of the Vulnerable Software and Affected Versions emlog version 6.0.0stable Description The issue is related to a SQL Injection vulnerability. This vulnerability can execute any SQL statement and query server sensitive data via the "admin/navbar.php?action=add page" endpoint. The action...

Emlog SQL注入漏洞

emlog is a powerful blog and CMS builder based on PHP and MySQL. A SQL injection vulnerability exists in emlog version 6.0.0-stable. An attacker can exploit this vulnerability to execute arbitrary SQL statements and query sensitive server data via admin/navbar.php?action=addpage...

emlog cross-site scripting vulnerability

emlog is a PHP and MySQL based blog and CMS builder. A cross-site scripting vulnerability exists in emlog version 6.0.0. The vulnerability can be exploited to execute arbitrary code by adding a specially crafted script as a link to a new blog post...

CVE-2020-18194

Cross Site Scripting XSS in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post...

Cross site scripting

Cross Site Scripting XSS in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post...

CVE-2020-18194

CVE-2020-18194 concerns a cross-site scripting (XSS) vulnerability in emlog v6.0.0. The issue allows remote attackers to execute arbitrary code by inserting a crafted script as a link to a new blog post. Documents consistently describe XSS as the vulnerability, with the exploit described as requi...

CVE-2020-18194: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post...

PT-2021-10153

Name of the Vulnerable Software and Affected Versions: emlog version 6.0.0 Description: The issue allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post, which is a form of Cross Site Scripting XSS. This enables attackers to potentially inject...

Emlog 跨站脚本漏洞

emlog is a PHP and MySQL based blog and CMS builder. A cross-site scripting vulnerability exists in emlog version 6.0.0. The vulnerability can be exploited to execute arbitrary code by adding a specially crafted script as a link to a new blog post...

Emlog Cross-Site Scripting Vulnerability

Emlog is a PHP and MySQL based CMS builder for Emlog personal developers. A cross-site scripting vulnerability exists in emlog version 6.0, which stems from the presence of XSS. no detailed vulnerability details are available at this time...

emlog Remote Code Execution Vulnerability

emlog is a powerful blog and CMS builder based on PHP and MySQL. A remote code execution vulnerability exists in emlog versions 5.3.1, 6.0.0. The vulnerability stems from uploading a database backup file in admin/data.php. An attacker can exploit this vulnerability to achieve remote code executio...

CVE-2021-31737

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

CVE-2021-31737

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

CVE-2021-31737

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

Remote code execution

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

CVE-2021-31737

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

CVE-2021-31737

CVE-2021-31737 affects emlog v5.3.1 and v6.0.0. Description across Red Hat, CNVD, NVD and CNVD confirms a Remote Code Execution vulnerability caused by uploading a database backup file via admin/data.php. The root cause is the handling of uploaded database backups leading to code execution on the...

CVE-2021-31737

emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php...

PT-2021-19485

Name of the Vulnerable Software and Affected Versions emlog versions 5.3.1 through 6.0.0 Description The issue is related to a Remote Code Execution vulnerability. This vulnerability is due to the upload of a database backup file in the admin/data.php file. Recommendations For emlog version 5.3.1...

Emlog 代码问题漏洞

emlog is a powerful blog and CMS builder based on PHP and MySQL. A remote code execution vulnerability exists in emlog versions 5.3.1, 6.0.0. The vulnerability stems from uploading a database backup file in admin/data.php. An attacker can exploit this vulnerability to achieve remote code executio...