CVE-2024-46540
Published
CVSS v3
6.3
MEDIUM
CVSS v2
N/A
Affected
2
PROJECTS
Description
A remote code execution (RCE) vulnerability in the component /admin/store.php of Emlog Pro before v2.3.15 allows attackers to use remote file downloads and self-extract fucntions to upload webshells to the target server, thereby obtaining system privileges.