Skip to content
OpenAdvisories

Vendor

emlog

40 known vulnerabilities.

Products

emlog 39 Pro 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73849

    emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

    Emlog is an open source website building system. In 2.6.26 and earlier, install.php accepts action=reinstall without authentication and deliberately skips the already-installed check because the guard runs only when $act != 'reinstall'. A remote attacker can …

    emlog emlog
  • Critical 10.0
    CVE-2026-42287

    Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions

    Emlog is an open source website building system. Prior to version 2.6.11, direct SQL injection in article creation and update functions allows attackers to execute arbitrary SQL commands, potentially leading to complete database compromise, data theft, or sys…

    emlog emlog
  • Critical 9.3
    CVE-2026-22799

    emlog Arbitrary File Upload Vulnerability

    Emlog is an open source website building system. emlog v2.6.1 and earlier exposes a REST API endpoint (/index.php?rest-api=upload) for media file uploads. The endpoint fails to implement proper validation of file types, extensions, and content, allowing authe…

    emlog emlog