VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 28, 2025· Updated Mar 28, 2025

Emlog Pro contains an SQL injection vulnerability.

CVE-2025-30372

Description

Emlog is an open source website building system. Emlog Pro versions pro-2.5.7 and pro-2.5.8 contain an SQL injection vulnerability. search_controller.php does not use addslashes after urldecode, allowing the preceeding addslashes to be bypassed by URL double encoding. This could result in potential leakage of sensitive information from the user database. Version pro-2.5.9 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Emlog/Emlogllm-fuzzy2 versions
    pro-2.5.7, pro-2.5.8+ 1 more
    • (no CPE)range: pro-2.5.7, pro-2.5.8
    • (no CPE)range: >= pro-2.5.7, < pro-2.5.9

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.