emlog Vulnerability Advisory Catalog

Total 93 security vulnerabilities recorded for emlog software and firmware.

← Back to All Vendors
Component: emlog

A vulnerability was found in Emlog Pro up to 2.4.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/us...

📅 2024-12-20
CVSS 4.3 Dossier →
Component: emlog

A vulnerability was found in Emlog Pro up to 2.4.1. It has been classified as problematic. This affects an unknown part of the file /admin/tag.php. Th...

📅 2024-12-20
CVSS 4.3 Dossier →
Component: emlog

emlog pro <=2.3.18 is vulnerable to Cross Site Scripting (XSS), which allows attackers to write malicious JavaScript code in published articles....

📅 2024-11-15
CVSS 5.4 Dossier →
Component: emlog

A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file download...

📅 2024-09-30
CVSS 6.3 Dossier →
Component: emlog

Emlog pro2.3 is vulnerable to Cross Site Request Forgery (CSRF) via twitter.php which can be used with a XSS vulnerability to access administrator inf...

📅 2024-06-10
CVSS 6.5 Dossier →
Component: emlog

A vulnerability was found in Emlog Pro 2.3.4. It has been classified as problematic. This affects an unknown part of the component Cookie Handler. The...

📅 2024-05-17
CVSS 3.7 Dossier →
CVE-2024-5043 MEDIUM
Component: emlog

A vulnerability was found in Emlog Pro 2.3.4 and classified as critical. Affected by this issue is some unknown functionality of the file admin/settin...

📅 2024-05-17
CVSS 4.7 Dossier →
Component: emlog

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker ...

📅 2024-05-06
CVSS 6.3 Dossier →
Component: emlog

A vulnerability was found in Emlog Pro 2.2.10. It has been rated as problematic. This issue affects some unknown processing of the file /admin/tag.php...

📅 2024-04-14
CVSS 2.4 Dossier →
Component: emlog

A vulnerability was found in Emlog Pro 2.2.10. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/twitter...

📅 2024-04-14
CVSS 2.4 Dossier →
Component: emlog

Cross Site Scripting (XSS) vulnerability in emlog version Pro 2.3, allow remote attackers to execute arbitrary code via a crafted payload to the botto...

📅 2024-04-03
CVSS 6.1 Dossier →
Component: emlog

There is a Stored XSS Vulnerability in Emlog Pro 2.2.8 Article Publishing, due to non-filtering of quoted content....

📅 2024-02-21
CVSS 6.1 Dossier →
Component: emlog

Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.php?action=write....

📅 2024-01-16
CVSS 6.1 Dossier →
Component: emlog

Emlog Pro v2.1.14 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin/article.php?active_savedraf...

📅 2023-12-14
CVSS 6.1 Dossier →
Component: emlog

A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php....

📅 2023-12-13
CVSS 6.1 Dossier →
Component: emlog

Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php....

📅 2023-12-12
CVSS 7.2 Dossier →
CVE-2023-44974 CRITICAL
Component: emlog

An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading...

📅 2023-10-03
CVSS 9.8 Dossier →
CVE-2023-44973 CRITICAL
Component: emlog

An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploadi...

📅 2023-10-03
CVSS 9.8 Dossier →
Component: emlog

A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or H...

📅 2023-10-02
CVSS 5.4 Dossier →
CVE-2023-43291 CRITICAL
Component: emlog

Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component....

📅 2023-09-27
CVSS 9.8 Dossier →
Component: emlog

emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php....

📅 2023-08-03
CVSS 7.2 Dossier →
Component: emlog

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php....

📅 2023-07-26
CVSS 6.5 Dossier →
Component: emlog

*File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php ...

📅 2023-06-05
CVSS 7.5 Dossier →
Component: emlog

Multiple stored cross-site scripting (XSS) vulnerabilities in Emlog Pro v2.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted...

📅 2023-04-27
CVSS 5.4 Dossier →
Page 3 of 4 (93 Total Records)