Elitecms

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Elitecms records in CISA KEV

No Elitecms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Elite Cms 17 records HIGH Elitecms 1 record LOW

Records

17 records in Elite Cms · all components

TI-2023-22570 CVE-2023-42331 · GHSA-h6gm-gj2c-56ch

A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute…

HIGH 73

A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01461 Published 2023-09-20 No fix listed CWE-434

TI-2022-12928 CVE-2022-30808 · GHSA-95x2-g4pg-jcff

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.

MEDIUM 59

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.17458 Published 2022-05-31 No fix listed CWE-434

TI-2022-08127 CVE-2022-24218 · GHSA-8pm4-vfp2-j7qc

An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.

MEDIUM 56

An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.1695 Published 2022-02-01 No fix listed

TI-2022-12934 CVE-2022-30816 · GHSA-xw44-gv6q-c7r2

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.

MEDIUM 44

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-05-31 No fix listed CWE-89

TI-2022-12933 CVE-2022-30815 · GHSA-f85p-83p6-33xw

elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=

MEDIUM 44

elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-05-31 No fix listed CWE-89

TI-2022-12932 CVE-2022-30814 · GHSA-6mc2-pgj3-wf69

elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.

MEDIUM 44

elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-05-31 No fix listed CWE-89

TI-2022-12931 CVE-2022-30813 · GHSA-9vhf-vc89-j49j

elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.

MEDIUM 44

elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-05-31 No fix listed CWE-89

TI-2022-12930 CVE-2022-30810 · GHSA-qm37-x39p-ccvv

elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.

MEDIUM 44

elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-05-31 No fix listed CWE-89

TI-2022-12929 CVE-2022-30809 · GHSA-4qp2-gh5q-r27v

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.

MEDIUM 44

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01155 Published 2022-05-31 No fix listed CWE-89

TI-2022-08131 CVE-2022-24222 · GHSA-cf2q-f5hr-q6hj

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.

MEDIUM 44

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-02-01 No fix listed CWE-89

TI-2022-08130 CVE-2022-24221 · GHSA-xppf-jw7p-wfmj

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.

MEDIUM 44

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-02-01 No fix listed CWE-89

TI-2022-08129 CVE-2022-24220 · GHSA-98gg-p6fj-wqhm

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.

MEDIUM 44

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-02-01 No fix listed CWE-89

TI-2022-08128 CVE-2022-24219 · GHSA-7w9v-pc98-h626

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.

MEDIUM 44

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-02-01 No fix listed CWE-89

TI-2021-21058 CVE-2021-46093 · GHSA-v963-rpmg-g29p

eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.

MEDIUM 44

eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2022-02-01 No fix listed CWE-276

TI-2018-08789 CVE-2018-12250 · GHSA-f2fp-fjwg-625f

An issue was discovered in Elite CMS Pro 2.01.

LOW 35

An issue was discovered in Elite CMS Pro 2.01.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01596 Published 2019-07-03 No fix listed CWE-89

TI-2022-12927 CVE-2022-30804 · GHSA-4pg8-m48c-w77f

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

LOW 31

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01119 Published 2022-05-31 No fix listed CWE-22

TI-2022-19172 CVE-2022-40361 · GHSA-8m3p-p7g3-92q6

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute…

LOW 27

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00385 Published 2024-01-11 No fix listed CWE-79

Open these records in search →