CVE-2021-30081: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=addpage...

PT-2021-18596

Name of the Vulnerable Software and Affected Versions emlog version 6.0.0stable Description The issue is related to a SQL Injection vulnerability. This vulnerability can execute any SQL statement and query server sensitive data via the "admin/navbar.php?action=add page" endpoint. The action...