Vulnerabilities

TI-2009-01575 CVE-2009-1659 · GHSA-3673-4qjp-285p

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows…

LOW 34

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows remote attackers to bypass intended access restrictions and upload and execute arbitrary files via an avatar file with an accepted Con…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01964 Published 2009-05-17 No fix listed

TI-2009-01427 CVE-2009-1506 · GHSA-mj5c-f99f-vj33

SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to…

LOW 32

SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to banner-details.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00871 Published 2009-05-01 No fix listed CWE-89

Vulnerabilities

Filters

Unrestricted file upload vulnerability in admin/uploadimage.php in eLitius 1.0 allows…

SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to…