Emlog
Page 2 of 2 — Emlog CVEs from a corpus of 106, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-30227 | Medium | 6.1 | 2021-04-29 | Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0. |
CVE-2020-21585 | Critical | 9.8 | 2021-04-02 | Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module. |
CVE-2021-3293 | Medium | 5.3 | 2021-02-08 | emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file. |
CVE-2019-17073 | Medium | 6.5 | 2019-10-01 | emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal. |
CVE-2019-16868 | Critical | 9.8 | 2019-09-25 | emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in th… |
CVE-2018-18316 | High | 8.8 | 2018-10-15 | emlog v6.0.0 has CSRF via the admin/user.php?action=new URI. |