Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
emlog vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv3
CVE-2020-21654
emlog v6.0 contains a vulnerability in the component admin\template.php, which allows malicious users to getshell via a crafted Zip file.
Emlog Emlog 6.0.0
9.8
CVSSv3
CVE-2022-23379
Emlog v6.0 exists to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
Emlog Emlog 6.0.0
4.8
CVSSv3
CVE-2022-43372
Emlog Pro v1.7.1 exists to contain a reflected cross-site scripting (XSS) vulnerability at /admin/store.php.
Emlog Emlog 1.7.1
7.2
CVSSv3
CVE-2020-21013
emlog v6.0.0 contains a SQL injection via /admin/comment.php.
Emlog Emlog 6.0.0
6.5
CVSSv3
CVE-2020-21014
emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.
Emlog Emlog 6.0.0
4.3
CVSSv3
CVE-2020-21321
emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows malicious users to arbitrarily add articles.
Emlog Emlog 6.0.0
9.8
CVSSv3
CVE-2023-44973
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows malicious users to execute arbitrary code via uploading a crafted PHP file.
Emlog Emlog 2.2.0
9.8
CVSSv3
CVE-2023-44974
An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows malicious users to execute arbitrary code via uploading a crafted PHP file.
Emlog Emlog 2.2.0
1 Github repository
6.1
CVSSv3
CVE-2023-41618
Emlog Pro v2.1.14 exists to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin/article.php?active_savedraft.
Emlog Emlog 2.1.14
6.1
CVSSv3
CVE-2023-41619
Emlog Pro v2.1.14 exists to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.php?action=write.
Emlog Emlog 2.1.14
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310
CVE-2024-21683
CVE-2024-22187
chrome
deserialization
XPath injection
CVE-2024-27842
denial of service
CVE-2024-24851
google
CVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »