Emlog · weakness class
SQL Injection
12 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- check available
- 1
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- Emlog 2.1.9 - SQL Injection
- Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().
- emlog v6.0.0 contains a SQL injection via /admin/comment.php.
- An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action…
- Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.
- EMLOG SQL Injection Vulnerability
- Emlog Pro api_controller.php sql injection
- Emlog Pro contains an SQL injection vulnerability.
- Emlog Blind SQL Injection via Authentication Cookie
- Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() Function
- Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parameters
- Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.