CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| ALTO8.8 |
An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page. |
| 24/05/2021 |
| CVE-2020-18194 | MÉDIO6.1 | Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post. | 17/05/2021 |
| CVE-2021-31737 | CRÍTICO9.8 | emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php. | 06/05/2021 |
| CVE-2021-30227 | MÉDIO6.1 | Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0. | 29/04/2021 |
| CVE-2020-21585 | CRÍTICO9.8 | Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. | 02/04/2021 |
| CVE-2021-3293 | MÉDIO5.3 | emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file. | 08/02/2021 |
| CVE-2019-17073 | MÉDIO6.5 | emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal. | 01/10/2019 |
| CVE-2019-16868 | CRÍTICO9.8 | emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter. | 25/09/2019 |
| CVE-2018-18316 | ALTO8.8 | emlog v6.0.0 has CSRF via the admin/user.php?action=new URI. | 15/10/2018 |