CVE-2017-20063

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of the component File Upload. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. Upgradi...

CVE-2017-20064

Elefant CMS 1.3.12-RC contains a remote code-injection vulnerability in an unknown function of /designer/add/layout. The issue allows manipulation leading to code execution and is addressed by upgrading to version 1.3.13. Multiple connected sources corroborate the existence of the code-injection ...

CVE-2017-20064 Elefant CMS layout code injection

A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /designer/add/layout. The manipulation leads to code injection. The attack can be launched remotely. Upgrading to version 1.3.13 is able to...

CVE-2017-20063

Elefant CMS 1.3.12-RC contains a vulnerability in the filemanager/upload/drop component of the File Upload function that leads to improper privilege management. The issue is exploitable remotely because it affects an unknown function in that file path. Upgrading to version 1.3.13 is cited as the ...

CVE-2017-20062

CVE-2017-20062 affects Elefant CMS 1.3.12-RC. The issue is a cross-site request forgery (CSRF) vulnerability that can be manipulated remotely; exploit has been disclosed publicly. Upgrading to version 1.3.13 mitigates the issue. Multiple connected sources (RH, NVD, OSV, CNVD, CNVD/Vuln enrichment...

CVE-2017-20061

Elefant CMS 1.3.12-RC is affected by a reflected cross-site scripting (XSS) in the /admin/extended handling. The vulnerability arises from manipulating the argument name with the payload %3Cimg%20src=no%20onerror=alert(1)%3E, enabling remote exploitation. The issue is specified as part of CVE-201...

CVE-2017-20061 Elefant CMS extended Reflected cross site scriting

A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /admin/extended. The manipulation of the argument name with the input %3Cimg%20src=no%20onerror=alert1%3E leads to basic cross site scripting Reflected. The...

CVE-2017-20061 Elefant CMS extended Reflected cross site scriting

A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /admin/extended. The manipulation of the argument name with the input %3Cimg%20src=no%20onerror=alert1%3E leads to basic cross site scripting Reflected. The...

CVE-2017-20060 Elefant CMS Blog Post Persistent cross site scriting

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting Persistent. It is possible to initiate the attack remotely. Upgrading to version 1.3.13 i...

CVE-2017-20060

CVE-2017-20060 affects Elefant CMS 1.3.12-RC, specifically the Blog Post Handler. The issue enables a persistent cross-site scripting (XSS) vulnerability that can be triggered remotely. Upgrading to version 1.3.13 is identified as the fix. The available connected sources confirm the vulnerability...

CVE-2017-20059 Elefant CMS Title Persistent cross site scriting

A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the component Title Handler. The manipulation with the input leads to basic cross site scripting Persistent. The attack may be launched remotely...

CVE-2017-20059

Summary: CVE-2017-20059 affects Elefant CMS 1.3.12-RC, where the Title Handler component accepts input that can be manipulated to trigger persistent cross-site scripting (XSS). The issue is exploitable remotely and is linked to how the input is processed in the Title Handler. Root cause: insuffic...

CVE-2017-20058 Elefant CMS Version Comparison Persistent cross site scriting

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

CVE-2017-20058 Elefant CMS Version Comparison Persistent cross site scriting

A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting Persistent. The attack can be launched remotely. Upgrading to version...

CVE-2017-20058

Elefant CMS 1.3.12-RC contains a vulnerability in the Version Comparison functionality that enables persistent cross-site scripting (XSS). The issue can be triggered remotely and affects an unknown function of the Version Comparison component. Upgrading to version 1.3.13 addresses this issue. No ...

CVE-2017-20057 Elefant CMS Persistent cross site scriting

A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting Persistent. It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to addres...

CVE-2017-20057 Elefant CMS Persistent cross site scriting

A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting Persistent. It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to addres...

CVE-2017-20057

Elefant CMS 1.3.12-RC contains a cross-site scripting (Persistent) vulnerability via an unknown function that manipulates the username argument. Exploitation can be performed remotely. The issue is mitigated by upgrading to version 1.3.13, per the CVE description and corroborating vendor entries ...

Netgear Routers Buffer Overflow (CVE-2017-6862)

A buffer overflow vulnerability exists in Netgear Routers. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system or cause application crashes...

SUSE: Security Advisory (SUSE-SU-2022:2111-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...