CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/12/2023 |
| CVE-2023-44974 | 심각9.8 | An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. | 03/10/2023 |
| CVE-2023-44973 | 심각9.8 | An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file. | 03/10/2023 |
| CVE-2023-43267 | 보통5.4 | A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field. | 02/10/2023 |
| CVE-2023-43291 | 심각9.8 | Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component. | 27/09/2023 |
| CVE-2023-39121 | 높음7.2 | emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php. | 03/08/2023 |
| CVE-2023-37049 | 보통6.5 | emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php. | 26/07/2023 |
| CVE-2020-19028 | 높음7.5 | *File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function. | 05/06/2023 |
| CVE-2023-30338 | 보통5.4 | Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Article Title or Article Summary parameters. | 27/04/2023 |
| CVE-2022-3968 | 보통6.1 | A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown functionality of the file admin/article_save.php. The manipulation of the argument tag leads to cross site scripting. The attack can be launched remotely. The name of the patch is 5bf7a79826e0ea09bcc8a21f | 13/11/2022 |
| CVE-2022-43372 | 보통4.8 | Emlog Pro v1.7.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability at /admin/store.php. | 03/11/2022 |
| CVE-2022-42189 | 높음7.2 | Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability. | 21/10/2022 |
| CVE-2022-1526 | 보통5.4 | A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2. This affects the POST parameter handling of articles. The manipulation with the input <script>alert(1);</script> leads to cross site scripting. It is possible to initiate the attack remotely but it requires a signup and login by t | 29/04/2022 |
| CVE-2022-23379 | 심각9.8 | Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid(). | 04/02/2022 |
| CVE-2022-23872 | 보통4.8 | Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footer_info. | 31/01/2022 |
| CVE-2021-44584 | 보통6.1 | Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter. | 06/01/2022 |
| CVE-2021-40883 | 심각9.8 | A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins. | 14/12/2021 |