Lucene search
+L

1218 matches found

Mend
Mend
•added 2024/05/17 11:31 a.m.•4 views

CVE-2024-5043

A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

8.8CVSS0.00624EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/05/17 11:31 a.m.•59 views

CVE-2024-5043 Emlog Pro setting.php unrestricted upload

A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

5.8CVSS4.7AI score0.00624EPSS
SaveExploits1References4
OSV
OSV
•added 2024/05/17 11:31 a.m.•15 views

CVE-2024-5043 Emlog Pro setting.php unrestricted upload

A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

5.1CVSS5.4AI score
SaveExploits0References6
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•19 views

Emlog Pro 代码问题漏洞

Emlog is a PHP and MySQL based CMS website builder for emlog individual developers. A code issue vulnerability exists in Emlog Pro version 2.3.4, which stems from an unknown function in the file admin/setting.php that causes unrestricted uploads...

8.8CVSS5.2AI score0.00624EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/05/17 12:00 a.m.•15 views

Emlog Pro 授权问题漏洞

emlog is a PHP and MySQL based CMS builder for emlog personal developers. An authorization issue vulnerability exists in Emlog Pro version 2.3.4, which stems from incorrect authentication of the parameter AuthCookie of the component Cookie Handler. An attacker can exploit this vulnerability to...

8.1CVSS6.9AI score0.00959EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•3 views

PT-2024-34204

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.3.4 Description: A critical issue affects some unknown functionality of the file admin/setting.php, leading to unrestricted upload. The attack may be launched remotely. The estimated number of potentially affected devices...

8.8CVSS0.00624EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•6 views

CVE-2024-5044: Improper Authentication

A vulnerability was found in Emlog Pro 2.3.4. It has been classified as problematic. This affects an unknown part of the component Cookie Handler. The manipulation of the argument AuthCookie leads to improper authentication. It is possible to initiate the attack remotely. The complexity of an...

8.1CVSS4.9AI score0.00959EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•5 views

CVE-2024-5043: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/setting.php. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

8.8CVSS5.3AI score0.00624EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•6 views

PT-2024-34215

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.3.4 Description: A vulnerability was found in the Cookie Handler component, where the manipulation of the AuthCookie argument leads to improper authentication. This issue can be initiated remotely, with a rather high...

8.1CVSS5.3AI score0.00959EPSS
SaveExploits1References8
NVD
NVD
•added 2024/05/06 2:15 p.m.•21 views

CVE-2024-33752

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

6.3CVSS7.3AI score0.04646EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/05/06 12:00 a.m.•18 views

emlog 安全漏洞

emlog is a PHP and MySQL based CMS website builder by emlog personal developer. A security vulnerability exists in emlog pro version 2.3.0, version 2.3.2. An attacker exploits the vulnerability to submit a special request to upload a malicious file to execute arbitrary code...

6.3CVSS7.4AI score0.04646EPSS
SaveExploits1References2
Mend
Mend
•added 2024/05/06 12:00 a.m.•2 views

CVE-2024-33752

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

6.3CVSS0.04646EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/06 12:00 a.m.•5 views

CVE-2024-33752: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

6.3CVSS6.6AI score0.04646EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/06 12:00 a.m.•20 views

PT-2024-25464 · Emlog Pro · Emlog Pro

Name of the Vulnerable Software and Affected Versions: emlog pro versions 2.3.0 through 2.3.2 Description: An arbitrary file upload issue exists at admin/views/plugin.php, allowing a remote attacker to submit a special request and upload a malicious file to execute arbitrary code. Recommendations...

6.3CVSS7.1AI score0.04646EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/05/06 12:00 a.m.•24 views

CVE-2024-33752

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

7.7AI score0.04646EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/06 12:00 a.m.•42 views

CVE-2024-33752

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

7.5AI score0.04646EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/06 12:00 a.m.•97 views

CVE-2024-33752

The emlog pro CMS (PHP and MySQL based) versions 2.3.0 and 2.3.2 is affected by an arbitrary file upload vulnerability located at admin/views/plugin.php. A remote attacker can submit a special request to upload a malicious file, potentially leading to the execution of arbitrary code . As a tempor...

6.3CVSS7.6AI score0.04646EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/05/06 12:00 a.m.•12 views

CVE-2024-33752

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code...

6.3CVSS7.8AI score
SaveExploits0References3
NVD
NVD
•added 2024/04/14 11:15 p.m.•33 views

CVE-2024-3763

A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php of the component Post Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

5.4CVSS3.3AI score0.00489EPSS
SaveExploits1References4
NVD
NVD
•added 2024/04/14 10:15 p.m.•27 views

CVE-2024-3762

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter.php of the component Whisper Page. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been...

5.4CVSS3.4AI score0.00489EPSS
SaveExploits1References4
Rows per page
Query Builder