İçeriğe atla
Noroxi

emlog kayıtları

emlog üreticisine ait 93 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%3,2
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19
  3. 21
  4. 22
  5. 23
  6. 24
  7. 25
  8. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

93 kayıt
  • CVE-2023-44974
    45Planlayın

    An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %19

    emlog · emlog3 Eki 2023

  • CVE-2021-31737
    40Planlayın

    emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php.

    KritikCVSS 9,8İstismar yokEPSS %4

    emlog · emlog6 May 2021

  • CVE-2020-21585
    40Planlayın

    Vulnerability in emlog v6.0.0 allows user to upload webshells via zip plugin module.

    KritikCVSS 9,8İstismar yokEPSS %3

    emlog · emlog2 Nis 2021

  • CVE-2021-40883
    40Planlayın

    A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.

    KritikCVSS 9,8İstismar yokEPSS %3

    emlog · emlog14 Ara 2021

  • CVE-2019-16868
    40Planlayın

    emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traver

    KritikCVSS 9,8İstismar yokEPSS %3

    emlog · emlog25 Eyl 2019

  • CVE-2023-43291
    40Planlayın

    Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php com

    KritikCVSS 9,8İstismar yokEPSS %2

    emlog · emlog27 Eyl 2023

  • CVE-2022-23379
    39İzleyin

    Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().

    KritikCVSS 9,8İstismar yokEPSS %1

    emlog · emlog4 Şub 2022

  • CVE-2023-44973
    39İzleyin

    An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code v

    KritikCVSS 9,8İstismar yokEPSS %1

    emlog · emlog3 Eki 2023

  • CVE-2025-29401
    39İzleyin

    An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %1

    emlog · emlog19 Mar 2025

  • CVE-2025-25783
    39İzleyin

    An arbitrary file upload vulnerability in the component admin\plugin.php of Emlog Pro v2.5.3 allows attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %1

    emlog · emlog26 Şub 2025

  • CVE-2026-22799
    37İzleyin

    emlog Arbitrary File Upload Vulnerability

    KritikCVSS 9,3İstismar yokEPSS %1

    emlog · emlog12 Oca 2026

  • CVE-2025-61318
    36İzleyin

    Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

    KritikCVSS 9,1İstismar yokEPSS %1

    emlog · emlog8 Ara 2025

  • CVE-2021-30081
    35İzleyin

    An issue was discovered in emlog 6.0.0stable.

    YüksekCVSS 8,8İstismar yokEPSS %1

    emlog · emlog24 May 2021

  • CVE-2025-47785
    35İzleyin

    EMLOG SQL Injection Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    emlog · emlog15 May 2025

  • CVE-2025-47787
    35İzleyin

    Emlog Pro Contains a File Upload Vulnerability

    YüksekCVSS 8,9İstismar yokEPSS %1

    emlog · emlog15 May 2025

  • CVE-2018-18316
    35İzleyin

    emlog v6.0.0 has CSRF via the admin/user.php?action=new URI.

    YüksekCVSS 8,8İstismar yokEPSS %1

    emlog · emlog15 Eki 2018

  • CVE-2025-61930
    35İzleyin

    Emlog Pro has CSRF issue that Enables Admin Password Reset

    YüksekCVSS 8,8İstismar yokEPSS %0

    emlog · emlog10 Eki 2025

  • CVE-2026-34228
    34İzleyin

    Emlog: CSRF in Backend Upgrade Interface Leading to Arbitrary Remote SQL Execution and Arbitrary File Write

    YüksekCVSS 8,7İstismar yokEPSS %0

    emlog · emlog3 Nis 2026

  • CVE-2020-19028
    30İzleyin

    *File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/p

    YüksekCVSS 7,5İstismar yokEPSS %1

    emlog · emlog5 Haz 2023

  • CVE-2025-30372
    30İzleyin

    Emlog Pro contains an SQL injection vulnerability.

    YüksekCVSS 7,7İstismar yokEPSS %1

    emlog · emlog28 Mar 2025

  • CVE-2026-21433
    30İzleyin

    Emlog vulnerable to Server-Side Request Forgery (SSRF)

    YüksekCVSS 7,7İstismar yokEPSS %0

    emlog · emlog2 Oca 2026

  • CVE-2023-39121
    29İzleyin

    emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.

    YüksekCVSS 7,2Kavram kanıtıEPSS %3

    emlog · emlog3 Ağu 2023

  • CVE-2025-25823
    29İzleyin

    A cross-site scripting (XSS) vulnerability in Emlog Pro v2.5.4 allows attackers to execute arbitrary web scripts or HTML via injecting a cra

    YüksekCVSS 7,3İstismar yokEPSS %0

    emlog · emlog26 Şub 2025

  • CVE-2026-31954
    29İzleyin

    Emlog asynchronous media file deletion missing CSRF protection

    YüksekCVSS 7,3İstismar yokEPSS %0

    emlog · emlog11 Mar 2026

  • CVE-2022-42189
    28İzleyin

    Emlog Pro 1.6.0 plugins upload suffers from a remote code execution (RCE) vulnerability.

    YüksekCVSS 7,2İstismar yokEPSS %2

    emlog · emlog21 Eki 2022