Skip to content
Noroxi

elitecms records

18 published records for vendor elitecms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 22
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

18 records
  • CVE-2022-30808
    44Plan

    elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.

    CriticalCVSS 9.8No exploitEPSS 17%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-24218
    41Plan

    An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.

    CriticalCVSS 9.1No exploitEPSS 17%

    elitecms · elite cmsFeb 1, 2022

  • CVE-2021-46093
    39Monitor

    eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsFeb 1, 2022

  • CVE-2022-30814
    39Monitor

    elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-30816
    39Monitor

    elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-30815
    39Monitor

    elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-30809
    39Monitor

    elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-30810
    39Monitor

    elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-30813
    39Monitor

    elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-24220
    39Monitor

    eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsFeb 1, 2022

  • CVE-2022-24221
    39Monitor

    eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsFeb 1, 2022

  • CVE-2022-24222
    39Monitor

    eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsFeb 1, 2022

  • CVE-2022-24219
    39Monitor

    eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    elitecms · elite cmsFeb 1, 2022

  • CVE-2023-42331
    35Monitor

    A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.

    HighCVSS 8.8No exploitEPSS 1%

    elitecms · elite cmsSep 20, 2023

  • CVE-2008-4046
    30Monitor

    SQL injection vulnerability in index.php in eliteCMS 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.

    HighCVSS 7.5Proof of conceptEPSS 1%

    elitecms · elitecmsSep 11, 2008

  • CVE-2018-12250
    28Monitor

    An issue was discovered in Elite CMS Pro 2.01.

    HighCVSS 7.2No exploitEPSS 2%

    elitecms · elite cmsJul 3, 2019

  • CVE-2022-30804
    26Monitor

    elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

    MediumCVSS 6.5No exploitEPSS 1%

    elitecms · elite cmsJun 2, 2022

  • CVE-2022-40361
    24Monitor

    Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/log

    MediumCVSS 6.1No exploitEPSS 0%

    elitecms · elite cmsJan 10, 2024