TI-2017-14130 CVE-2017-20064 · GHSA-gx6v-67qv-rhx5
Elefant CMS layout code injection
Priority HIGH 71
A vulnerability was found in Elefant CMS 1.3.12-RC.
Elefant
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Elefant records in CISA KEVNo Elefant vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2017-14129 CVE-2017-20063 · GHSA-mwh6-g9wx-xcx3
Elefant CMS File Upload drop privileges management
Priority HIGH 71
A vulnerability was found in Elefant CMS 1.3.12-RC.
TI-2017-14128 CVE-2017-20062 · GHSA-pq7f-cq6q-94xh
Elefant CMS cross-site request forgery
Priority HIGH 71
A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic.
TI-2017-14124 CVE-2017-20058 · GHSA-5hfm-g799-wjw6
Elefant CMS Version Comparison Persistent cross site scriting
Priority MEDIUM 60
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC.
TI-2018-12126 CVE-2018-16975 · GHSA-x2w2-qgv6-8xrm
An issue was discovered in Elefant CMS before 2.0.7.
Priority MEDIUM 48
An issue was discovered in Elefant CMS before 2.0.7.
TI-2018-12125 CVE-2018-16974 · GHSA-77j2-7whr-6vpx
An issue was discovered in Elefant CMS before 2.0.7.
Priority MEDIUM 48
An issue was discovered in Elefant CMS before 2.0.7.
TI-2018-11128 CVE-2018-15601 · GHSA-pcf7-5974-vjh4
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step…
Priority MEDIUM 45
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
TI-2018-11745 CVE-2018-16387 · GHSA-79m2-h67v-35q7
An issue was discovered in Elefant CMS before 2.0.5.
Priority LOW 39
An issue was discovered in Elefant CMS before 2.0.5.
TI-2017-14123 CVE-2017-20057 · GHSA-xwj7-29j7-rw76
Elefant CMS Persistent cross site scriting
Priority LOW 28
A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC.
TI-2017-14127 CVE-2017-20061 · GHSA-hgm9-pww2-93pc
Elefant CMS extended Reflected cross site scriting
Priority LOW 25
A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic.
TI-2017-14126 CVE-2017-20060 · GHSA-4453-g295-24mh
Elefant CMS Blog Post Persistent cross site scriting
Priority LOW 25
A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC.
TI-2017-14125 CVE-2017-20059 · GHSA-7f7g-8q3x-jpx9
Elefant CMS Title Persistent cross site scriting
Priority LOW 25
A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC.
TI-2012-01168 CVE-2012-1296 · GHSA-qjjq-rcq8-jw6j
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in…
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via…
TI-2012-05239 CVE-2012-6521 · GHSA-6xqp-725m-52r8
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions.