Medium severity6.3NVD Advisory· Published Mar 19, 2025· Updated Jun 17, 2026

CVE-2025-29405

Description

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via uploading a crafted PHP file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Emlog/Emlog3 versions
cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*+ 2 more
- cpe:2.3:a:emlog:emlog:*:*:*:*:pro:*:*:*range: >=2.5.1,<=2.5.7
- (no CPE)
- (no CPE)range: 2.5.0, 2.5.*

Patches

Vulnerability mechanics

References

github.com/bGl1o/emlogpro/blob/main/emlog%20pro2.5.7-getshell-2.mdnvdExploitThird Party Advisory
gist.github.com/bGl1o/19a141ee6e899884fa85f3a52898bcc6nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000