Vulnerabilities

TI-2024-06379 CVE-2024-6878 · GHSA-q247-wj3r-2x97

Directory Browsing in Eliz Software's Panel

MEDIUM 46

Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00405 Published 2024-09-18 Fixed in v2.3.24 CWE-552

TI-2024-06378 CVE-2024-6877 · GHSA-w92r-xm6v-f2vj

Reflected XSS in Eliz Software's Panel

MEDIUM 42

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Reflected XSS.

CVSS 4.0CRITICAL 9.4 Network Low privileges User interaction EPSS 0.00265 Published 2024-09-18 Fixed in v2.3.24 CWE-79

TI-2024-05523 CVE-2024-5960 · GHSA-9fcx-vcgw-ccc6

Plaintext Storage of a Password in Eliz Software's Panel

MEDIUM 49

Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00433 Published 2024-09-18 Fixed in v2.3.24 CWE-256

TI-2024-05522 CVE-2024-5959 · GHSA-6p4p-f7m9-43rh

Stored XSS in Eliz Software's Panel

MEDIUM 40

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Software Panel allows Stored XSS.

CVSS 4.0CRITICAL 9.3 Network Low privileges User interaction EPSS 0.00262 Published 2024-09-18 Fixed in v2.3.24 CWE-79

TI-2024-05521 CVE-2024-5958 · GHSA-h66g-2x3f-vgpp

SQLi in Eliz Software's Panel

MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Panel allows Command Line Execution through SQL Injection.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00503 Published 2024-09-18 Fixed in v2.3.24 CWE-89