Lucene search
China National Vulnerability DatabaseCNVD-2023-79683HistoryOct 07, 2023 - 12:00 a.m.
emlog deserialization vulnerability
2023-10-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
emlog
php
mysql
cms
deserialization vulnerability
remote attacker
arbitrary code
cache.php
emlog is a PHP and MySQL based CMS builder for emlog personal developers. emlog pro v2.1.15 and previous versions of the existence of a deserialization vulnerability, the vulnerability stems from the application in the receipt of user-submitted serialized data insecure deserialization process, a remote attacker can exploit the vulnerability through the cache.php component to execute arbitrary code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| emlog emlog pro | le | 2.1.15 |
Related
cvelist
cvelist
CVE-2023-43291
2023-09-26 00:00:00
osv
osv
CVE-2023-43291
2023-09-27 15:19:33
nvd
nvd
CVE-2023-43291
2023-09-27 15:19:33
prion
prion
Deserialization of untrusted data
2023-09-27 15:19:00
cve
cve
CVE-2023-43291
2023-09-27 15:19:33