log injection vulnerabilities and exploits

(subscribe to this query)

XXE in Diving Log 6.0 allows malicious users to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import.

Divinglog Diving Log

1 EDB exploit

CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.

Activity Log Project Activity Log

SQL injection vulnerability in the backend module in the Developer Log (devlog) extension prior to 2.11.4 for TYPO3 allows remote editors to execute arbitrary SQL commands via unspecified vectors.

Developer Log Project Developer Log

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

Thethinkery Project Log 1.5.3

1 EDB exploit

FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.

Fspro Event Log Explorer 4.6.1.2115

1 EDB exploit

Inavitas Solar Log product has an unauthenticated SQL Injection vulnerability.

Inavitas Solar Log

The link-log plugin prior to 2.1 for WordPress has SQL injection.

Perafox Link Log

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

Vmware Vrealize Log Insight

1 Article

SQL Injection vulnerability in audit/class.audit.php in osTicket osTicket-plugins before commit a7842d494889fd5533d13deb3c6a7789768795ae via the order parameter to the getOrder function.

Enhancesoft Audit Log

The simple-login-log plugin prior to 1.1.2 for WordPress has SQL injection.

Simplerealtytheme Simple Login Log

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook