critical9.8
CVE-2019-16868
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in th…
Impact
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emlog | Emlog | through 5.3.1 Version 6.0.0 |