Bydsteve

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.3.4 Description: A critical issue affects some unknown functionality of the file admin/setting.php, leading to unrestricted upload. The attack may be launched remotely. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited. Recommendations: For Emlog Pro version 2.3.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Emlog Pro version 2.3.4 Description: A vulnerability was found in the Cookie Handler component, where the manipulation of the `AuthCookie` argument leads to improper authentication. This issue can be initiated remotely, with a rather high complexity of attack and difficult exploitability. The exploit has been disclosed to the public and may be used. Recommendations: For Emlog Pro version 2.3.4, as a temporary workaround, consider restricting access to the Cookie Handler component until a patch is available. Avoid using the `AuthCookie` argument in affected areas until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DolphinPHP versions up to 1.5.1 **Description** A critical issue was found in DolphinPHP, affecting an unknown functionality of the file common.php. The manipulation of the `id` argument leads to os command injection. This issue can be exploited remotely. **Recommendations** For versions up to 1.5.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.