A
n arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remote attacker to submit a special request to upload a malicious file to execute arbitrary code.
References
| Link | Resource |
|---|---|
| https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md | Exploit Third Party Advisory |
| https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Jun 2025, 12:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:emlog:emlog:2.3.2:*:*:*:pro:*:*:* cpe:2.3:a:emlog:emlog:2.3.0:*:*:*:pro:*:*:* |
|
| First Time |
Emlog emlog
Emlog |
21 Nov 2024, 09:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Myanemo/emlogpro/blob/main/emlog%20pro2.3.2%20File%20upload%20to%20getshell.md - |
03 Jul 2024, 01:58
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.3 |
| CWE | CWE-434 |
06 May 2024, 16:00
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-06 14:15
Updated : 2025-06-11 12:06
NVD link : CVE-2024-33752
Mitre link : CVE-2024-33752
CVE.ORG link : CVE-2024-33752
JSON object : View
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type