Emlsoft Project: Security Vulnerabilities
An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.
CVSS Score
5.4
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2018-08-06
An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter.
CVSS Score
9.8
EPSS Score
0.003
Published
2018-08-06