Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2019-10-01	CVE-2019-17073	Path Traversal vulnerability in Emlog 3.5.1/5.3.1/6.0.0 emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal. network low complexity emlog CWE-22	5.5
2018-10-15	CVE-2018-18316	Cross-Site Request Forgery (CSRF) vulnerability in Emlog 6.0.0 emlog v6.0.0 has CSRF via the admin/user.php?action=new URI. network emlog CWE-352	6.8