CVE-2025-30372 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. `search_controller.php` does…
High CVSS: 7.7

CVE-2025-30372

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. `search_controller.php` does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potential leakage of sensitive information from the user database. Version pro-2.5.9 fixes the issue.
Vendor
Emlog
Product
Emlog
CWE
CWE-89
Yayın Tarihi
2025-03-28 15:15:51
Güncelleme
2025-04-14 14:49:16
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-89 Emlog HIGH Emlog 2025

Referanslar

https://github.com/emlog/emlog/security/advisories/GHSA-w6xc-r6x5-m77c https://github.com/emlog/emlog/security/advisories/GHSA-w6xc-r6x5-m77c