PT-2023-11511 · Unknown · Emlog Emlogcms
CVE-2020-19028
·
Publicado
2023-06-05
·
Atualizado
2025-01-08
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Emlog EmlogCMS version 6.0.0
Description
A remote attacker can gain access to sensitive information via the "/admin/plugin.php" function. This issue allows unauthorized access, potentially leading to data breaches.
Recommendations
For Emlog EmlogCMS version 6.0.0, consider disabling the file upload functionality in the /admin/plugin.php function until a patch is available. Restrict access to the /admin/plugin.php function to minimize the risk of exploitation.
Exploit
Correção
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Emlog Emlogcms