CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

PT-2019-14939

Name of the Vulnerable Software and Affected Versions emlog versions prior to 6.0.0beta Description The issue allows remote authenticated users to delete arbitrary files. This is achieved through a directory traversal vulnerability in the "admin/template.php" endpoint, specifically when the...

CVE-2019-17073: Improper Limitation of a Pathname to a Restricted Directory

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

Arbitrary file deletion

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868

Emlog (up to 6.0.0beta) is vulnerable to arbitrary file deletion via admin/data.php?action=dell_all_bak with directory traversal in bak[]. This can delete arbitrary files. Confirmed by CVE-2019-16868 entries (NVD, Red Hat). CVSSv3.1 base score 9.8 (CRITICAL): Network-based, no auth, no user inter...

CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

CVE-2019-16868: Improper Limitation of a Pathname to a Restricted Directory

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dellallbak request with directory traversal sequences in the bak parameter...

PT-2019-14839

Name of the Vulnerable Software and Affected Versions emlog versions prior to 6.0.0 Description The issue allows for arbitrary file deletion via an admin/data.php?action=dell all bak request. This is achieved by using directory traversal sequences in the bak parameter. Recommendations For version...

Arbitrary file deletion vulnerability in emlog v6.0.0 backend b****.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. The emlog v6.0.0 backend b.php page has an arbitrary file deletion vulnerability...

SQL Injection Vulnerability in emlog v5.3.1 Backend ta***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. emlog v5.3.1 SQL injection vulnerability exists in the backend ta.php page, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in emlog v6.0.0 Backend co***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend co.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in emlog v6.0.0 Backend na***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend na.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in emlog v6.0.0 backend pl***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend pl.php page. An attacker can exploit the vulnerability to elevate background privileges...

SQL Injection Vulnerability in emlog v6.0.0 Backend wi***.php Page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A SQL injection vulnerability exists in the emlog v6.0.0 backend wi.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

File upload vulnerability in emlog v6.0.0 backend te***.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A file upload vulnerability exists in the emlog v6.0.0 backend te.php page. An attacker can exploit the vulnerability to elevate background privileges...

emlog has an arbitrary file deletion vulnerability

emlog is a functional blog and CMS builder based on PHP and MySQL. There is an arbitrary file deletion vulnerability in emlog. The vulnerability is caused by the program does not filter the template deletion function , an attacker can use the vulnerability to delete arbitrary files on the server...