elefantcms kayıtları
elefantcms üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %92,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-269 Improper Privilege Management1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-16975İstismar yok | An issue was discovered in Elefant CMS before 2.0.7.elefantcms · elefant · CWE-94 | Kritik9,8 | — | %3,7 | 12 Eyl 2018 |
40Planlayın | CVE-2018-16974İstismar yok | An issue was discovered in Elefant CMS before 2.0.7.elefantcms · elefant · CWE-434 | Kritik9,8 | — | %3,6 | 12 Eyl 2018 |
39İzleyin | CVE-2018-15601İstismar yok | apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" prelefantcms · elefantcms · CWE-20 | Kritik9,8 | — | %1,6 | 20 Ağu 2018 |
35İzleyin | CVE-2017-20064İstismar yok | Elefant CMS layout code injectionelefantcms · elefant cms · CWE-94 | Yüksek8,8 | — | %1,1 | 20 Haz 2022 |
35İzleyin | CVE-2017-20063İstismar yok | Elefant CMS File Upload drop privileges managementelefantcms · elefant cms · CWE-269 | Yüksek8,8 | — | %0,9 | 20 Haz 2022 |
35İzleyin | CVE-2018-16387İstismar yok | An issue was discovered in Elefant CMS before 2.0.5.elefantcms · elefantcms · CWE-352 | Yüksek8,8 | — | %0,7 | 2 Eyl 2018 |
35İzleyin | CVE-2017-20062İstismar yok | Elefant CMS cross-site request forgeryelefantcms · elefant cms · CWE-352 | Yüksek8,8 | — | %0,4 | 20 Haz 2022 |
24İzleyin | CVE-2017-20058İstismar yok | Elefant CMS Version Comparison Persistent cross site scritingelefantcms · elefantcms · CWE-80 | Orta6,1 | — | %0,8 | 20 Haz 2022 |
24İzleyin | CVE-2017-20057İstismar yok | Elefant CMS Persistent cross site scritingelefantcms · elefant cms · CWE-80 | Orta6,1 | — | %0,6 | 20 Haz 2022 |
21İzleyin | CVE-2017-20059İstismar yok | Elefant CMS Title Persistent cross site scritingelefantcms · elefant cms · CWE-80 | Orta5,4 | — | %0,5 | 20 Haz 2022 |
21İzleyin | CVE-2017-20060İstismar yok | Elefant CMS Blog Post Persistent cross site scritingelefantcms · elefant cms · CWE-80 | Orta5,4 | — | %0,5 | 20 Haz 2022 |
21İzleyin | CVE-2017-20061İstismar yok | Elefant CMS extended Reflected cross site scritingelefantcms · elefant cms · CWE-80 | Orta5,4 | — | %0,5 | 20 Haz 2022 |
17İzleyin | CVE-2012-1296İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x befoelefantcms · elefantcms · CWE-79 | Orta4,3 | — | %1,3 | 26 Ağu 2012 |
17İzleyin | CVE-2012-6521İstismar yok | Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrarelefantcms · elefantcms · CWE-79 | Orta4,3 | — | %1,0 | 23 Oca 2013 |
- CVE-2018-1697540Planlayın
An issue was discovered in Elefant CMS before 2.0.7.
KritikCVSS 9,8İstismar yokEPSS %4elefantcms · elefant12 Eyl 2018
- CVE-2018-1697440Planlayın
An issue was discovered in Elefant CMS before 2.0.7.
KritikCVSS 9,8İstismar yokEPSS %4elefantcms · elefant12 Eyl 2018
- CVE-2018-1560139İzleyin
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" pr
KritikCVSS 9,8İstismar yokEPSS %2elefantcms · elefantcms20 Ağu 2018
- CVE-2017-2006435İzleyin
Elefant CMS layout code injection
YüksekCVSS 8,8İstismar yokEPSS %1elefantcms · elefant cms20 Haz 2022
- CVE-2017-2006335İzleyin
Elefant CMS File Upload drop privileges management
YüksekCVSS 8,8İstismar yokEPSS %1elefantcms · elefant cms20 Haz 2022
- CVE-2018-1638735İzleyin
An issue was discovered in Elefant CMS before 2.0.5.
YüksekCVSS 8,8İstismar yokEPSS %1elefantcms · elefantcms2 Eyl 2018
- CVE-2017-2006235İzleyin
Elefant CMS cross-site request forgery
YüksekCVSS 8,8İstismar yokEPSS %0elefantcms · elefant cms20 Haz 2022
- CVE-2017-2005824İzleyin
Elefant CMS Version Comparison Persistent cross site scriting
OrtaCVSS 6,1İstismar yokEPSS %1elefantcms · elefantcms20 Haz 2022
- CVE-2017-2005724İzleyin
Elefant CMS Persistent cross site scriting
OrtaCVSS 6,1İstismar yokEPSS %1elefantcms · elefant cms20 Haz 2022
- CVE-2017-2005921İzleyin
Elefant CMS Title Persistent cross site scriting
OrtaCVSS 5,4İstismar yokEPSS %1elefantcms · elefant cms20 Haz 2022
- CVE-2017-2006021İzleyin
Elefant CMS Blog Post Persistent cross site scriting
OrtaCVSS 5,4İstismar yokEPSS %1elefantcms · elefant cms20 Haz 2022
- CVE-2017-2006121İzleyin
Elefant CMS extended Reflected cross site scriting
OrtaCVSS 5,4İstismar yokEPSS %0elefantcms · elefant cms20 Haz 2022
- CVE-2012-129617İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x befo
OrtaCVSS 4,3İstismar yokEPSS %1elefantcms · elefantcms26 Ağu 2012
- CVE-2012-652117İzleyin
Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrar
OrtaCVSS 4,3İstismar yokEPSS %1elefantcms · elefantcms23 Oca 2013