Vulnerabilities

TI-2017-14130 CVE-2017-20064 · GHSA-gx6v-67qv-rhx5

Elefant CMS layout code injection

HIGH 71

A vulnerability was found in Elefant CMS 1.3.12-RC.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01099 Published 2022-06-20 Fixed in 1.3.13 CWE-94

TI-2017-14129 CVE-2017-20063 · GHSA-mwh6-g9wx-xcx3

Elefant CMS File Upload drop privileges management

HIGH 71

A vulnerability was found in Elefant CMS 1.3.12-RC.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00865 Published 2022-06-20 Fixed in 1.3.13 CWE-269

TI-2017-14128 CVE-2017-20062 · GHSA-pq7f-cq6q-94xh

Elefant CMS cross-site request forgery

HIGH 71

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00384 Published 2022-06-20 Fixed in 1.3.13 CWE-352

TI-2017-14127 CVE-2017-20061 · GHSA-hgm9-pww2-93pc

Elefant CMS extended Reflected cross site scriting

LOW 25

A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2022-06-20 Fixed in 1.3.13 CWE-80

TI-2017-14126 CVE-2017-20060 · GHSA-4453-g295-24mh

Elefant CMS Blog Post Persistent cross site scriting

LOW 25

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00523 Published 2022-06-20 Fixed in 1.3.13 CWE-80

TI-2017-14125 CVE-2017-20059 · GHSA-7f7g-8q3x-jpx9

Elefant CMS Title Persistent cross site scriting

LOW 25

A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00523 Published 2022-06-20 Fixed in 1.3.13 CWE-80

TI-2017-14124 CVE-2017-20058 · GHSA-5hfm-g799-wjw6

Elefant CMS Version Comparison Persistent cross site scriting

MEDIUM 60

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00763 Published 2022-06-20 Fixed in 1.3.13 CWE-80

TI-2017-14123 CVE-2017-20057 · GHSA-xwj7-29j7-rw76

Elefant CMS Persistent cross site scriting

LOW 28

A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00596 Published 2022-06-20 Fixed in 1.3.13 CWE-80

TI-2018-12126 CVE-2018-16975 · GHSA-x2w2-qgv6-8xrm

An issue was discovered in Elefant CMS before 2.0.7.

MEDIUM 48

An issue was discovered in Elefant CMS before 2.0.7.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03727 Published 2018-09-12 Fixed in 2.0.7 CWE-94

TI-2018-12125 CVE-2018-16974 · GHSA-77j2-7whr-6vpx

An issue was discovered in Elefant CMS before 2.0.7.

MEDIUM 48

An issue was discovered in Elefant CMS before 2.0.7.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03596 Published 2018-09-12 Fixed in 2.0.7 CWE-434

TI-2018-11745 CVE-2018-16387 · GHSA-79m2-h67v-35q7

An issue was discovered in Elefant CMS before 2.0.5.

LOW 39

An issue was discovered in Elefant CMS before 2.0.5.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2018-09-03 Fixed in 2.0.5 CWE-352

TI-2018-11128 CVE-2018-15601 · GHSA-pcf7-5974-vjh4

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step…

MEDIUM 45

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0163 Published 2018-08-21 Fixed in 2.0.4 CWE-20

TI-2012-05239 CVE-2012-6521 · GHSA-6xqp-725m-52r8

Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant…

LOW 22

Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01003 Published 2013-01-24 No fix listed CWE-79

TI-2012-01168 CVE-2012-1296 · GHSA-qjjq-rcq8-jw6j

Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01284 Published 2012-08-26 Fixed in 1.0.2-Beta, 1.1.5-Beta CWE-79

Vulnerabilities

Filters