CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

245 matches found

Packet Storm•added 2017/02/17 12:00 a.m.•50 views

Elefant CMS 1.3.12-RC Cross Site Scripting

Security Advisory - Curesec Research Team 1. Introduction Affected Product: Elefant CMS 1.3.12-RC Fixed in: 1.3.13 Fixed Version https://github.com/jbroadway/elefant/releases/tag/ Link: elefant1313rc Vendor Website: https://www.elefantcms.com/ Vulnerability XSS Type: Remote Yes Exploitable:...

SaveExploits0

securityvulns•added 2014/12/22 12:00 a.m.•60 views

Elefant CMS v1.3.9 - Persistent Name Update Vulnerability

Document Title: =============== Elefant CMS v1.3.9 - Persistent Name Update Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1365 Release Date: ============= 2014-12-03 Vulnerability Laboratory ID VL-ID: ====================================...

7.4AI score

SaveExploits0

Packet Storm•added 2014/12/16 12:00 a.m.•51 views

Elefant CMS 1.3.9 Cross Site Scripting

0.2AI score

SaveExploits0

Vulnerability Lab•added 2014/12/03 12:00 a.m.•61 views

Elefant CMS v1.3.9 - Persistent Name Update Vulnerability

7.1AI score

SaveExploits0

Vulnerability Lab•added 2014/12/03 12:00 a.m.•47 views

Elefant CMS v1.3.9 - Persistent Name Update Vulnerability

0.5AI score

SaveExploits0

NVD•added 2013/01/24 1:55 a.m.•25 views

CVE-2012-6521

Cross-site scripting XSS vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions...

4.3CVSS5.7AI score0.01003EPSS

SaveExploits1References2

Prion•added 2013/01/24 1:55 a.m.•21 views

Cross site scripting

4.3CVSS6.2AI score0.01003EPSS

SaveExploits1References2Affected Software1

CVE•added 2013/01/24 1:00 a.m.•62 views

CVE-2012-6521

CVE-2012-6521 is an XSS in Elefant CMS 1.2.0. The vulnerability resides in apps/admin/handlers/versions.php and is exploitable via the id parameter to admin/versions, allowing remote attackers to inject arbitrary web script or HTML. The affected component is the PHP handler for version management...

4.3CVSS5.9AI score0.01003EPSS

SaveExploits1References2Affected Software1

Mend•added 2013/01/24 1:00 a.m.•3 views

CVE-2012-6521

6.3CVSS0.01003EPSS

SaveExploits1References2

Cvelist•added 2013/01/24 1:00 a.m.•33 views

CVE-2012-6521

5.7AI score0.01003EPSS

SaveExploits1References2

Positive Technologies•added 2013/01/24 12:00 a.m.•3 views

PT-2013-1985

Name of the Vulnerable Software and Affected Versions Elefant CMS version 1.2.0 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the id parameter to the "admin/versions" endpoint...

4.3CVSS0.01003EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2013/01/24 12:00 a.m.•5 views

CVE-2012-6521: Improper Neutralization of Input During Web Page Generation

4.3CVSS6AI score0.01003EPSS

SaveExploits1References2

NVD•added 2012/08/26 8:55 p.m.•27 views

CVE-2012-1296

Multiple cross-site scripting XSS vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 body parameter to admin/preview...

4.3CVSS5.7AI score0.01284EPSS

SaveExploits0References6

Prion•added 2012/08/26 8:55 p.m.•22 views

Cross site scripting

4.3CVSS6.1AI score0.01284EPSS

SaveExploits0References6Affected Software1

Cvelist•added 2012/08/26 8:00 p.m.•46 views

CVE-2012-1296

5.7AI score0.01284EPSS

SaveExploits0References6

Mend•added 2012/08/26 8:00 p.m.•4 views

CVE-2012-1296

6.3CVSS0.01284EPSS

SaveExploits0References12

CVE•added 2012/08/26 8:00 p.m.•59 views

CVE-2012-1296

Elefant CMS (vulnerable ranges include 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta) contains multiple XSS flaws in apps/admin/handlers/preview.php. The issue arises from insufficient sanitization of input in the title and body parameters, allowing remote attackers to inject arbitrary HTML...

4.3CVSS5.9AI score0.01284EPSS

SaveExploits0References6Affected Software1

Rapid7 Vulnerability Database (full)•added 2012/08/26 12:00 a.m.•7 views

CVE-2012-1296: Improper Neutralization of Input During Web Page Generation

4.3CVSS5.9AI score0.01284EPSS

SaveExploits0References2

Positive Technologies•added 2012/08/26 12:00 a.m.•5 views

PT-2012-3183

Name of the Vulnerable Software and Affected Versions Elefant CMS versions 1.0.x through 1.0.2-Beta Elefant CMS versions 1.1.x through 1.1.5-Beta Description The issue allows remote attackers to inject arbitrary web script or HTML via the title or body parameter to the "admin/preview" endpoint...

4.3CVSS0.01284EPSS

SaveExploits0References13

Packet Storm•added 2012/08/03 12:00 a.m.•22 views

Elefant CMS 1.2.0 Cross Site Scripting

=========================================================================== Author: PuN!Sh3r Vulnerable Software: Elefant CMS 1.2.0 Official Site:http://http://www.elefantcms.com/download/ =========================================================================== Vuln Desc: Cross Site ScriptXss...

0.3AI score

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by