CVE-2025-29401

An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:emlog:emlog:2.5.7:*:*:*:pro:*:*:*

History

16 Jun 2025, 18:49

Type Values Removed Values Added
CPE cpe:2.3:a:emlog:emlog:2.5.7:*:*:*:pro:*:*:*
First Time Emlog emlog
Emlog
References () https://github.com/bGl1o/emlogpro/blob/main/emlog%20pro2.5.7-getshell.md - () https://github.com/bGl1o/emlogpro/blob/main/emlog%20pro2.5.7-getshell.md - Exploit, Third Party Advisory

19 Mar 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-19 16:15

Updated : 2025-06-16 18:49


NVD link : CVE-2025-29401

Mitre link : CVE-2025-29401


JSON object : View

Products Affected

emlog

  • emlog
CWE

No CWE.