| शीर्षक | emlog EMLOG Pro <=Pro 2.6.8 Upload any file |
|---|
| विवरण | The plugin installation feature of emlog exhibits a significant security vulnerability. When uploading a plugin, the system only verifies the basic structure of the plugin package, yet it fails to conduct any security checks on the contents of the unzipped PHP files. An attacker can upload a plugin package containing malicious code, unzip it, and directly access the malicious PHP files to execute arbitrary system commands, thereby gaining complete control over the server. |
|---|
| स्रोत | ⚠️ https://github.com/qingyun985/Cyber-Security/issues/2 |
|---|
| उपयोगकर्ता | qingyunsec (UID 96803) |
|---|
| सबमिशन | 30/03/2026 08:30 AM (6 महीनों पहले) |
|---|
| संयम | 19/04/2026 07:02 PM (20 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 300089 [Emlog Pro 2.5.7 PHP File /views/plugin.php अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|