共找到 5 条公开漏洞记录
An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code.
Cross Site Scripting (XSS) vulnerability in Emlog Pro v2.1.14 via /admin/store.php.
emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.
emlog v5.3.1 is susceptible to full path disclosure via t/index.php, which allows an attacker to see the path to the webroot/file.