Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Emlog asynchronous media file deletion missing CSRF protection
Vulnerability Description
Emlog is an open source website building system. In 2.6.6 and earlier, the delete_async action (asynchronous delete) lacks a call to LoginAuth::checkToken(), enabling CSRF attacks.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N
Vulnerability Type
跨站请求伪造(CSRF)
Vulnerability Title
emlog 跨站请求伪造漏洞
Vulnerability Description
emlog是emlog开源的一套基于PHP和MySQL的CMS建站系统。 emlog 2.6.6及之前版本存在跨站请求伪造漏洞，该漏洞源于delete_async操作缺少令牌检查，可能导致跨站请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A