CVE-2023-37049

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

emlog 2.1.9 is vulnerable to Arbitrary file deletion via admin\template.php.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published
Jul 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-37057.5The vulnerability exists in CP-Plus NVR due to an improper input handling at the web-based management interface of the affected product. An CVE-2023-370579.8An issue in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to execute arbitrary code via the router's authentCVE-2023-370589.8Insecure Permissions vulnerability in JLINK Unionman Technology Co. Ltd Jlink AX1800 v.1.0 allows a remote attacker to escalate privileges vCVE-2023-37064.3The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to the plugin, allowingCVE-2023-370614.8Chamilo 1.11.x up to 1.11.20 allows users with an admin privilege account to insert XSS in the languages management section.CVE-2023-370624.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the course categories' definition.CVE-2023-370634.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the careers & promotions management section.CVE-2023-370644.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the extra fields management section.CVE-2023-370654.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the session category management section.CVE-2023-370664.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the skills wheel.CVE-2023-370674.8Chamilo 1.11.x up to 1.11.20 allows users with admin privilege account to insert XSS in the classes/usergroups management section.CVE-2023-370689.8Code-Projects Gym Management System V1.0 allows remote attackers to execute arbitrary SQL commands via the login form, leading to unauthoriz
CVE-2023-37049: Medium severity, CVSS 6.5 | Vulnix