TI-2017-14124 CVE-2017-20058 · GHSA-5hfm-g799-wjw6
Elefant CMS Version Comparison Persistent cross site scriting
Priority MEDIUM 60
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC.
Elefant
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Elefant records in CISA KEVNo Elefant vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Elefantcms · all components
TI-2018-11128 CVE-2018-15601 · GHSA-pcf7-5974-vjh4
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step…
Priority MEDIUM 45
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
TI-2018-11745 CVE-2018-16387 · GHSA-79m2-h67v-35q7
An issue was discovered in Elefant CMS before 2.0.5.
Priority LOW 39
An issue was discovered in Elefant CMS before 2.0.5.
TI-2012-01168 CVE-2012-1296 · GHSA-qjjq-rcq8-jw6j
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in…
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via…
TI-2012-05239 CVE-2012-6521 · GHSA-6xqp-725m-52r8
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions.