Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Eliz Software Component: Panel Clear all filters
TI-2024-06378 CVE-2024-6877 · GHSA-w92r-xm6v-f2vj

Reflected XSS in Eliz Software's Panel

Priority MEDIUM 42

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.

CVSS 4.0CRITICAL 9.4 Network Low privileges User interaction EPSS 0.00265 Published 2024-09-18 Fixed in v2.3.24 CWE-79
TI-2024-05523 CVE-2024-5960 · GHSA-9fcx-vcgw-ccc6

Plaintext Storage of a Password in Eliz Software's Panel

Priority MEDIUM 49

Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00433 Published 2024-09-18 Fixed in v2.3.24 CWE-256
TI-2024-05522 CVE-2024-5959 · GHSA-6p4p-f7m9-43rh

Stored XSS in Eliz Software's Panel

Priority MEDIUM 40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.00262 Published 2024-09-18 Fixed in v2.3.24 CWE-79
TI-2024-05521 CVE-2024-5958 · GHSA-h66g-2x3f-vgpp

SQLi in Eliz Software's Panel

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00503 Published 2024-09-18 Fixed in v2.3.24 CWE-89