CVE-2026-67598

CVE-2026-67598 affects Emlog Pro up to version 2.6.23. The TLS certificate verification is disabled in include/service/ai.php via CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST across sendStream(), sendImageRequest(), send(), and fetchSearchHtml(), with no option to re-enable verification. Thi...

CVE-2025-12248

A security vulnerability has been detected in CLTPHP 3.0. The affected element is an unknown function of the file /home/search.html. Such manipulation of the argument keyword leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2025-12248

CVE-2025-12248 concerns CLTPHP 3.0, where an unknown function in the file /home/search.html allows manipulation of the keyword argument leading to a SQL injection . The vulnerability is exploitable remotely and has had exploits disclosed publicly, with a Proof-of-Concept in the public domain. Aff...