CVE-2018-16974

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/rm/.htaccess to remove the .htaccess file, and then using a filename that ends in .php followed by space characters for bypassing the...

CVE-2018-16974

CVE-2018-16974 affects Elefant CMS

CVE-2018-16975

Elefant CMS prior to 2.0.7 contains a PHP code execution vulnerability in /designer/add/stylesheet.php. Insufficient input validation in apps/designer/handlers/csspreview.php allows a .php extension in the New Stylesheet Name field when combined with

Cross-Site Request Forgery (CSRF)

Elefant CMS is vulnerable to cross-site request forgery CSRF. There is no validation for anti-CSRF tokens in the add user function. A remote attacker will be able to add a user account by tricking the administrator into visiting a malicious HTML page, which would perform the action on behalf of t...

Cross site request forgery (csrf)

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add...

CVE-2018-16387

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add...

CVE-2018-16387

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add...

CVE-2018-16387

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add...

CVE-2018-16387

Elefant CMS prior to version 2.0.5 contains a CSRF vulnerability that can add a user account via the /user/add endpoint. The issue is documented across multiple disclosures (including CVE-2018-16387 and related advisories) and is confirmed by the NVD entry for CVE-2018-16387. The available descri...

Unrestricted File Upload

elefant CMS is vulnerable to an unrestricted file upload. In apps/filemanager/handlers/upload/drop.php, the upload file paths are decoded only after validating for restricted file extensions. This allows an attacker to bypass the validation by URL encoding the file extension and uploading a file...

CVE-2018-15601

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism...

Hardcoded credentials

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism...

CVE-2018-15601

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism...

CVE-2018-15601

apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism...

CVE-2018-15601

Elefant CMS 2.0.3 contains a bypass in apps/filemanager/handlers/upload/drop.php where URL decoding occurs after the restricted-extension check. This allows an attacker to upload files with any extension by URL-encoding the extension, bypassing the protection that should block executable files. T...

Elefant CMS 1.3.12-RC CSRF

Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version Link: https://github.com/jbroadway/elefant/releases/tag/elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability Type: CSRF Remote Exploitable: Yes Reported to vendor: 09/05/2016 Disclosed to...

Elefant CMS Cross-Site Request Forgery Vulnerability

Elefant CMS is a content management system. Elefant CMS suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to execute arbitrary HTML and script code within a user's browser session in the context of an affected site...

Elefant CMS 1.3.12-RC Code Execution

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability Code Execution Type: Remote Yes...

Elefant CMS 1.3.12-RC Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability XSS Type: Remote Yes Exploitable:...

Elefant CMS 1.3.12-RC Cross Site Request Forgery

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability CSRF Type: Remote Yes Exploitable:...