medium6.3
CVE-2024-46540
A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and sel…
Impact
A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emlog | Emlog | before 2.3.15 |