1218 matches found
emlog SQL Injection Vulnerability
emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
Sql injection
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121
CVE-2023-39121 affects emlog version 2.1.9. A SQL injection vulnerability exists in emlog’s admin/user.php handling and also, per the Nuclei template, in the data backup/restore functionality due to unsanitized input. Impact: attackers with admin credentials could potentially execute arbitrary SQ...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
CVE-2023-39121: Improper Neutralization of Special Elements used in an SQL Command
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
PT-2023-26791
Name of the Vulnerable Software and Affected Versions emlog version 2.1.9 Description A SQL injection issue was discovered in emlog via the "/admin/user.php" API endpoint. This allows for potential exploitation. Recommendations For emlog version 2.1.9, consider restricting access to the...
CVE-2023-39121
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php...
emlog SQL注入漏洞
emlog is a PHP and MySQL based CMS builder for emlog personal developers. A SQL injection vulnerability exists in emlog version 2.1.9, which stems from the lack of validation of externally entered SQL statements in the file /admin/user.php. An attacker can exploit this vulnerability to execute...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
Arbitrary file deletion
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
CVE-2023-37049
emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php...
PT-2023-25771 · Emlog · Emlog
Name of the Vulnerable Software and Affected Versions: emlog version 2.1.9 Description: The issue allows for Arbitrary file deletion via the admintemplate.php file. Recommendations: For emlog version 2.1.9, consider restricting access to the admintemplate.php file to minimize the risk of...