elitecms kayıtları
elitecms üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')12
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-276 Incorrect Default Permissions1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
44Planlayın | CVE-2022-30808İstismar yok | elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.elitecms · elite cms · CWE-434 | Kritik9,8 | — | %17,5 | 2 Haz 2022 |
41Planlayın | CVE-2022-24218İstismar yok | An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.elitecms · elite cms | Kritik9,1 | — | %17,0 | 1 Şub 2022 |
39İzleyin | CVE-2021-46093İstismar yok | eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.elitecms · elite cms · CWE-276 | Kritik9,8 | — | %1,2 | 1 Şub 2022 |
39İzleyin | CVE-2022-30814İstismar yok | elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 2 Haz 2022 |
39İzleyin | CVE-2022-30816İstismar yok | elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 2 Haz 2022 |
39İzleyin | CVE-2022-30815İstismar yok | elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 2 Haz 2022 |
39İzleyin | CVE-2022-30809İstismar yok | elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 2 Haz 2022 |
39İzleyin | CVE-2022-30810İstismar yok | elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 2 Haz 2022 |
39İzleyin | CVE-2022-30813İstismar yok | elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 2 Haz 2022 |
39İzleyin | CVE-2022-24220İstismar yok | eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 1 Şub 2022 |
39İzleyin | CVE-2022-24221İstismar yok | eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 1 Şub 2022 |
39İzleyin | CVE-2022-24222İstismar yok | eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 1 Şub 2022 |
39İzleyin | CVE-2022-24219İstismar yok | eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.elitecms · elite cms · CWE-89 | Kritik9,8 | — | %1,1 | 1 Şub 2022 |
35İzleyin | CVE-2023-42331İstismar yok | A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.elitecms · elite cms · CWE-434 | Yüksek8,8 | — | %1,5 | 20 Eyl 2023 |
30İzleyin | CVE-2008-4046Kavram kanıtı | SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.elitecms · elitecms · CWE-89 | Yüksek7,5 | — | %1,0 | 11 Eyl 2008 |
28İzleyin | CVE-2018-12250İstismar yok | An issue was discovered in Elite CMS Pro 2.01.elitecms · elite cms · CWE-89 | Yüksek7,2 | — | %1,6 | 3 Tem 2019 |
26İzleyin | CVE-2022-30804İstismar yok | elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.elitecms · elite cms · CWE-22 | Orta6,5 | — | %1,1 | 2 Haz 2022 |
24İzleyin | CVE-2022-40361İstismar yok | Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/logelitecms · elite cms · CWE-79 | Orta6,1 | — | %0,4 | 10 Oca 2024 |
- CVE-2022-3080844Planlayın
elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.
KritikCVSS 9,8İstismar yokEPSS %17elitecms · elite cms2 Haz 2022
- CVE-2022-2421841Planlayın
An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.
KritikCVSS 9,1İstismar yokEPSS %17elitecms · elite cms1 Şub 2022
- CVE-2021-4609339İzleyin
eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms1 Şub 2022
- CVE-2022-3081439İzleyin
elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-3081639İzleyin
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-3081539İzleyin
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-3080939İzleyin
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-3081039İzleyin
elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-3081339İzleyin
elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-2422039İzleyin
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms1 Şub 2022
- CVE-2022-2422139İzleyin
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms1 Şub 2022
- CVE-2022-2422239İzleyin
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms1 Şub 2022
- CVE-2022-2421939İzleyin
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.
KritikCVSS 9,8İstismar yokEPSS %1elitecms · elite cms1 Şub 2022
- CVE-2023-4233135İzleyin
A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.
YüksekCVSS 8,8İstismar yokEPSS %1elitecms · elite cms20 Eyl 2023
- CVE-2008-404630İzleyin
SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
YüksekCVSS 7,5Kavram kanıtıEPSS %1elitecms · elitecms11 Eyl 2008
- CVE-2018-1225028İzleyin
An issue was discovered in Elite CMS Pro 2.01.
YüksekCVSS 7,2İstismar yokEPSS %2elitecms · elite cms3 Tem 2019
- CVE-2022-3080426İzleyin
elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.
OrtaCVSS 6,5İstismar yokEPSS %1elitecms · elite cms2 Haz 2022
- CVE-2022-4036124İzleyin
Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/log
OrtaCVSS 6,1İstismar yokEPSS %0elitecms · elite cms10 Oca 2024