CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 高危8.8 |
An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page. |
| 24/05/2021 |
| CVE-2020-18194 | 中危6.1 | Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post. | 17/05/2021 |
| CVE-2021-31737 | 严重9.8 | emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php. | 06/05/2021 |
| CVE-2021-30227 | 中危6.1 | Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0. | 29/04/2021 |
| CVE-2020-21585 | 严重9.8 | Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. | 02/04/2021 |
| CVE-2021-3293 | 中危5.3 | emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file. | 08/02/2021 |
| CVE-2019-17073 | 中危6.5 | emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal. | 01/10/2019 |
| CVE-2019-16868 | 严重9.8 | emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter. | 25/09/2019 |
| CVE-2018-18316 | 高危8.8 | emlog v6.0.0 has CSRF via the admin/user.php?action=new URI. | 15/10/2018 |