Unrated severityNVD Advisory· Published May 6, 2024· Updated Aug 2, 2024

CVE-2024-33752

Description

An arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code.

Affected products

Emlog/Emlogcpe-rescue
Ultimate Project Manager CRM/PROllm-fuzzy
Range: =2.3.0, =2.3.2

Patches

Vulnerability mechanics

References

github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000