Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 108

Export CSV
CVE-2020-21585

Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.

CVSS 3.1 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2020-21321

emlog v6.0 contains a Cross-Site Request Forgery (CSRF) via /admin/link.php?action=addlink, which allows attackers to arbitrarily add articles.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2020-21014

emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2020-21013

emlog v6.0.0 contains a SQL injection via /admin/comment.php.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2020-18194

Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2019-17073

emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2019-16868

emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter.

CVSS 3.1 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2018-18316

emlog v6.0.0 has CSRF via the admin/user.php?action=new URI.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Emlog
Products
Emlog