TI-2017-14124 CVE-2017-20058 · GHSA-5hfm-g799-wjw6
Elefant CMS Version Comparison Persistent cross site scriting
Priority MEDIUM 60
A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC.
Vulnerabilities
5 records
TI-2018-11745 CVE-2018-16387 · GHSA-79m2-h67v-35q7
An issue was discovered in Elefant CMS before 2.0.5.
Priority LOW 39
An issue was discovered in Elefant CMS before 2.0.5.
TI-2018-11128 CVE-2018-15601 · GHSA-pcf7-5974-vjh4
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step…
Priority MEDIUM 45
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
TI-2012-05239 CVE-2012-6521 · GHSA-6xqp-725m-52r8
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant…
Priority LOW 22
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions.
TI-2012-01168 CVE-2012-1296 · GHSA-qjjq-rcq8-jw6j
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in…
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via…