medium6.3
CVE-2025-29405
An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via upl…
Impact
An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via uploading a crafted PHP file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emlog | Emlog | from 2.5.1 through 2.5.7 |