elefantcms records

14 published records for vendor elefantcms.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 92.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-16975No exploit	An issue was discovered in Elefant CMS before 2.0.7.elefantcms · elefant · CWE-94 pre-auth RCE	Critical9.8	—	3.7%	Sep 12, 2018
40Plan	CVE-2018-16974No exploit	An issue was discovered in Elefant CMS before 2.0.7.elefantcms · elefant · CWE-434 Pre-auth File upload	Critical9.8	—	3.6%	Sep 12, 2018
39Monitor	CVE-2018-15601No exploit	apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" prelefantcms · elefantcms · CWE-20 Pre-auth	Critical9.8	—	1.6%	Aug 20, 2018
35Monitor	CVE-2017-20064No exploit	Elefant CMS layout code injectionelefantcms · elefant cms · CWE-94 RCE	High8.8	—	1.1%	Jun 20, 2022
35Monitor	CVE-2017-20063No exploit	Elefant CMS File Upload drop privileges managementelefantcms · elefant cms · CWE-269	High8.8	—	0.9%	Jun 20, 2022
35Monitor	CVE-2018-16387No exploit	An issue was discovered in Elefant CMS before 2.0.5.elefantcms · elefantcms · CWE-352 Pre-auth CSRF	High8.8	—	0.7%	Sep 2, 2018
35Monitor	CVE-2017-20062No exploit	Elefant CMS cross-site request forgeryelefantcms · elefant cms · CWE-352 Pre-auth CSRF	High8.8	—	0.4%	Jun 20, 2022
24Monitor	CVE-2017-20058No exploit	Elefant CMS Version Comparison Persistent cross site scritingelefantcms · elefantcms · CWE-80 Pre-auth XSS	Medium6.1	—	0.8%	Jun 20, 2022
24Monitor	CVE-2017-20057No exploit	Elefant CMS Persistent cross site scritingelefantcms · elefant cms · CWE-80 Pre-auth XSS	Medium6.1	—	0.6%	Jun 20, 2022
21Monitor	CVE-2017-20059No exploit	Elefant CMS Title Persistent cross site scritingelefantcms · elefant cms · CWE-80 XSS	Medium5.4	—	0.5%	Jun 20, 2022
21Monitor	CVE-2017-20060No exploit	Elefant CMS Blog Post Persistent cross site scritingelefantcms · elefant cms · CWE-80 XSS	Medium5.4	—	0.5%	Jun 20, 2022
21Monitor	CVE-2017-20061No exploit	Elefant CMS extended Reflected cross site scritingelefantcms · elefant cms · CWE-80 XSS	Medium5.4	—	0.5%	Jun 20, 2022
17Monitor	CVE-2012-1296No exploit	Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x befoelefantcms · elefantcms · CWE-79 Pre-auth XSS	Medium4.3	—	1.3%	Aug 26, 2012
17Monitor	CVE-2012-6521No exploit	Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrarelefantcms · elefantcms · CWE-79 Pre-auth XSS	Medium4.3	—	1.0%	Jan 23, 2013

CVE-2018-16975
40Plan
An issue was discovered in Elefant CMS before 2.0.7.
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
elefantcms · elefantSep 12, 2018
CVE-2018-16974
40Plan
An issue was discovered in Elefant CMS before 2.0.7.
CriticalCVSS 9.8No exploitEPSS 4%
- Pre-auth
- File upload
elefantcms · elefantSep 12, 2018
CVE-2018-15601
39Monitor
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" pr
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
elefantcms · elefantcmsAug 20, 2018
CVE-2017-20064
35Monitor
Elefant CMS layout code injection
HighCVSS 8.8No exploitEPSS 1%
- RCE
elefantcms · elefant cmsJun 20, 2022
CVE-2017-20063
35Monitor
Elefant CMS File Upload drop privileges management
HighCVSS 8.8No exploitEPSS 1%
elefantcms · elefant cmsJun 20, 2022
CVE-2018-16387
35Monitor
An issue was discovered in Elefant CMS before 2.0.5.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
elefantcms · elefantcmsSep 2, 2018
CVE-2017-20062
35Monitor
Elefant CMS cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
elefantcms · elefant cmsJun 20, 2022
CVE-2017-20058
24Monitor
Elefant CMS Version Comparison Persistent cross site scriting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
elefantcms · elefantcmsJun 20, 2022
CVE-2017-20057
24Monitor
Elefant CMS Persistent cross site scriting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
elefantcms · elefant cmsJun 20, 2022
CVE-2017-20059
21Monitor
Elefant CMS Title Persistent cross site scriting
MediumCVSS 5.4No exploitEPSS 1%
- XSS
elefantcms · elefant cmsJun 20, 2022
CVE-2017-20060
21Monitor
Elefant CMS Blog Post Persistent cross site scriting
MediumCVSS 5.4No exploitEPSS 1%
- XSS
elefantcms · elefant cmsJun 20, 2022
CVE-2017-20061
21Monitor
Elefant CMS extended Reflected cross site scriting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
elefantcms · elefant cmsJun 20, 2022
CVE-2012-1296
17Monitor
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x befo
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
elefantcms · elefantcmsAug 26, 2012
CVE-2012-6521
17Monitor
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrar
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
elefantcms · elefantcmsJan 23, 2013