CVE-2025-30372

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. "searchcontroller.php" does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in...

CVE-2025-30372: Improper Neutralization of Special Elements used in an SQL Command

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. searchcontroller.php does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potentia...

PT-2025-13545

Name of the Vulnerable Software and Affected Versions Emlog Pro versions pro-2.5.7 through pro-2.5.8 Description Emlog is an open source website building system. The issue arises from the search controller.php file not using addslashes after urldecode, allowing the preceding addslashes to be...

h1-ctf: [h1-415 2020] Spent a week and failed at solving the last step.

Summary: I found something interesting with Headless chrome debugging in the last step, I am sure I am going to solve this after trying very hard for about a week, I don't know when this CTF is going to end, that's why I am submitting a summary of how to solve this so that I can write the full...