GCVE - cpe:2.3:a:emlog:emlog:6.0.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emlog:emlog:6.0.0:-:*:*:*:*:*:*

part: a version: 6.0.0 update: -

Vendor	Emlog (`9228eccc-8b2e-510f-a8c6-fe256aa9523f`)
Product	Emlog (`8a6106bc-cd8c-52c8-abed-0b208e6a16a7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/emlog/emlog`	purl2cpe	2026-06-01 10:13:05.510445

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-23379`	vulnerable	2026-06-08 05:40:57.028797	Details available Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid(). Published: 2022-02-04T22:19:22.000Z Updated: 2024-08-03T03:43:45.279Z Open on db.gcve.eu Reference links https://github.com/emlog/emlog/issues/144	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-31737`	vulnerable	2026-06-08 05:31:53.864512	Details available emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php. Published: 2021-05-06T20:15:31.000Z Updated: 2024-08-03T23:03:33.799Z Open on db.gcve.eu Reference links https://github.com/emlog/emlog/issues/82	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30227`	vulnerable	2026-06-08 05:31:47.248290	Details available Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0. Published: 2021-04-29T15:12:01.000Z Updated: 2024-08-03T22:24:59.670Z Open on db.gcve.eu Reference links https://github.com/emlog/emlog/issues/79	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-30081`	vulnerable	2026-06-08 05:31:46.889797	Details available An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page. Published: 2021-05-24T17:50:30.000Z Updated: 2024-08-03T22:24:59.172Z Open on db.gcve.eu Reference links https://github.com/emlog/emlog/issues/74	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-21654`	vulnerable	2026-06-08 05:22:30.982247	Details available emlog v6.0 contains a vulnerability in the component admin\template.php, which allows attackers to getshell via a crafted Zip file. Published: 2021-10-06T21:34:01.000Z Updated: 2024-08-04T14:30:33.527Z Open on db.gcve.eu Reference links https://github.com/emlog/emlog/issues/55	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-21585`	vulnerable	2026-06-08 05:22:30.905924	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-21321`	vulnerable	2026-06-08 05:22:30.771929	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-21014`	vulnerable	2026-06-08 05:22:30.650582	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-21013`	vulnerable	2026-06-08 05:22:30.650181	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-18194`	vulnerable	2026-06-08 05:20:56.904128	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.