TI-2024-05523 CVE-2024-5960 · GHSA-9fcx-vcgw-ccc6
Plaintext Storage of a Password in Eliz Software's Panel
Priority MEDIUM 49
Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.
Eliz Software
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Eliz Software records in CISA KEVNo Eliz Software vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2024-06379 CVE-2024-6878 · GHSA-q247-wj3r-2x97
Directory Browsing in Eliz Software's Panel
Priority MEDIUM 46
Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations.
TI-2024-05521 CVE-2024-5958 · GHSA-h66g-2x3f-vgpp
SQLi in Eliz Software's Panel
Priority MEDIUM 43
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection.
TI-2024-06378 CVE-2024-6877 · GHSA-w92r-xm6v-f2vj
Reflected XSS in Eliz Software's Panel
Priority MEDIUM 42
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.
TI-2024-05522 CVE-2024-5959 · GHSA-6p4p-f7m9-43rh
Stored XSS in Eliz Software's Panel
Priority MEDIUM 40
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.