Skip to content

Emlog · weakness class

SQL Injection

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

check available
1

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. Emlog 2.1.9 - SQL InjectionCVE-2023-39121Emlog · 2.5% likely

    CWE-89

  2. Emlog v6.0 was discovered to contain a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid().CVE-2022-23379Emlog · 1.4% likely

    CWE-89

  3. emlog v6.0.0 contains a SQL injection via /admin/comment.php.CVE-2020-21013Emlog · 1.0% likely

    CWE-89

  4. An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action…CVE-2021-30081Emlog · 1.0% likely

    CWE-89

  5. Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.CVE-2023-41623Emlog · 0.8% likely

    CWE-89

  6. EMLOG SQL Injection VulnerabilityCVE-2025-47785emlog · CVSS 8.3 · 0.8% likely

    CWE-89

  7. Emlog Pro api_controller.php sql injectionCVE-2025-5119Emlog · CVSS 7.3 · 0.6% likely

    CWE-89

  8. Emlog Pro contains an SQL injection vulnerability.CVE-2025-30372emlog · CVSS 7.7 · 0.6% likely

    CWE-89

  9. Emlog Blind SQL Injection via Authentication CookieCVE-2026-53756emlog · CVSS 4.9 · 0.4% likely

    CWE-89

  10. Emlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() FunctionCVE-2026-73850emlog · CVSS 8.6 · 0.4% likely

    CWE-89

  11. Emlog: SQL Injection in tag_model::updateTagName() via unsanitized parametersCVE-2026-34788emlog · CVSS 6.5 · 0.4% likely

    CWE-89

  12. Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() FunctionsCVE-2026-42287emlog · CVSS 10 · 0.2% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in