{"id":"CVE-2023-39121","aliases":["EUVD-2023-42867","GHSA-7xp7-2g7m-m925"],"status":"published","title":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin...","description":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.","severity":{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02513,"percentile":0.84921,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-08-03T00:00:00Z","modified":"2026-10-28T02:30:54Z","exploits":[{"source":"nuclei","id":"CVE-2023-39121","title":"Emlog 2.1.9 - SQL Injection","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39121.yaml"}],"products":[{"vendor":"emlog","product":"emlog"}],"references":[{"url":"https://github.com/safe-b/CVE/issues/1#issue-1817133689","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/safe-b/CVE/issues/1","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39121","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7xp7-2g7m-m925"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39121.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-39121","description":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.","status":"published","published":"2023-08-03T00:00:00Z","modified":"2024-10-17T15:23:38.893Z","updated_at":"2026-11-02T14:35:33.462059Z"}],"euvd":[{"id":"EUVD-2023-42867","description":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.","status":"published","published":"2023-08-03T00:00:00Z","modified":"2024-10-17T15:23:38Z","updated_at":"2026-11-03T00:27:34.339903Z"}],"ghsa":[{"id":"GHSA-7xp7-2g7m-m925","title":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin...","description":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.","status":"published","published":"2023-08-03T21:30:45Z","modified":"2024-04-04T06:32:20Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:56:43.202556Z"}],"nvd":[{"id":"CVE-2023-39121","description":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.","status":"published","published":"2023-08-03T20:15:11.623Z","modified":"2026-06-17T06:11:36.133Z","cvss":[{"version":"3.1","score":7.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:20.798312Z"}],"osv":[{"id":"CVE-2023-39121","description":"emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the component /admin/user.php.","status":"published","published":"2023-08-03T00:00:00Z","modified":"2026-10-28T02:30:54.82355154Z","updated_at":"2026-11-02T15:44:32.922049Z"}]}}