RSS   Podatności dla 'Emlog'   RSS

2023-12-12
 
CVE-2023-41623

CWE-89
 
 
Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.

 
2022-02-04
 
CVE-2022-23379

CWE-89
 
 
Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().

 
2022-01-06
 
CVE-2021-44584

CWE-79
 
 
Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter.

 
2021-12-14
 
CVE-2021-40883

CWE-434
 
 
A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.

 
2021-10-01
 
CVE-2020-21013

CWE-89
 
 
emlog v6.0.0 contains a SQL injection via /admin/comment.php.

 
 
CVE-2020-21014

CWE-732
 
 
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.

 
2021-05-24
 
CVE-2021-30081

CWE-89
 
 
An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page.

 
2021-05-17
 
CVE-2020-18194

CWE-79
 
 
Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.

 
2021-05-06
 
CVE-2021-31737

CWE-434
 
 
emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php.

 
2021-04-29
 
CVE-2021-30227

CWE-79
 
 
Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0.

 

Copyright 2024, cxsecurity.com

 

Back to Top