← Database

CVE-2025-29405

MEDIUM CVSS: 6.3 Published: 2025-03-19 Modified: 2026-06-17

Description

An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via uploading a crafted PHP file.

Affected Platforms

Emlog Emlog

Weakness Type

CWE-434

References