Vulnerabilities > Emlog > Emlog > 1.0.2

DATE CVE VULNERABILITY TITLE RISK
2023-09-27 CVE-2023-43291 Deserialization of Untrusted Data vulnerability in Emlog
Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component.
network
low complexity
emlog CWE-502
critical
9.8
2022-11-13 CVE-2022-3968 Cross-site Scripting vulnerability in Emlog
A vulnerability has been found in emlog and classified as problematic.
network
low complexity
emlog CWE-79
6.1
2022-04-29 CVE-2022-1526 Cross-site Scripting vulnerability in Emlog
A vulnerability, which was classified as problematic, was found in Emlog Pro up to 1.2.2.
network
low complexity
emlog CWE-79
5.4
2022-01-06 CVE-2021-44584 Cross-site Scripting vulnerability in Emlog
Cross-site scripting (XSS) vulnerability in index.php in emlog version <= pro-1.0.7 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
network
emlog CWE-79
4.3