CVE-2022-30815

Elitecms 1.01 is vulnerable to SQL injection via admin/edit_sidebar.php?page=2&sidebar due to lack of input validation on the sidebar parameter. This can allow attackers to execute arbitrary SQL and access sensitive data. No published fix is provided in the connected documents; remediation status...

CVE-2022-30815

elitecms 1.01 is vulnerable to SQL Injection via admin/editsidebar.php?page=2&sidebar=...

CVE-2022-30816

CVE-2022-30816 affects elitecms 1.01 and is a SQL Injection vulnerability exploitable via the /admin/edit_sidebar.php page. The root cause is lack of validation of the external input SQL statements in the page parameter, enabling an attacker to execute arbitrary SQL commands to steal sensitive da...

CVE-2022-30816

elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...

CVE-2022-30813: Improper Neutralization of Special Elements used in an SQL Command

elitecms 1.01 is vulnerable to SQL Injection via /admin/addpost.php...

PT-2022-20330

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "/admin/edit sidebar.php" API endpoint. Recommendations For elitecms version 1.01, update to a version that fixes this issue, if available. As a temporary workaround,...

PT-2022-20329

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue is related to SQL Injection. It can be exploited via the "admin/edit sidebar.php" endpoint with parameters such as page and sidebar. Recommendations For elitecms version 1.01, as a temporary...

PT-2022-20328

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "/admin/add sidebar.php" API endpoint. Recommendations For elitecms version 1.01, update to a version that fixes this issue, as using the current version may pose a...

PT-2022-20327

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue concerns SQL Injection, which can be exploited via the "/admin/add post.php" API endpoint. This allows for potential unauthorized access to database information. Recommendations For elitecms version...

PT-2022-20326

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue allows for SQL Injection via the "admin/edit post.php" endpoint. Recommendations For elitecms version 1.01, update to a version that fixes the SQL Injection issue in the "admin/edit post.php" endpoin...

PT-2022-20325

Name of the Vulnerable Software and Affected Versions elitecms version 1.01 Description The issue concerns SQL Injection via the "/admin/edit page.php?page=" endpoint. This allows for potential manipulation of database queries. No information is provided about the estimated number of affected...

PT-2022-20324

Name of the Vulnerable Software and Affected Versions elitecms version 1.0.1 Description The issue allows for Arbitrary code execution via the "admin/manage uploads.php" endpoint. Recommendations For elitecms version 1.0.1, as a temporary workaround, consider disabling access to the "admin/manage...

CVE-2022-30810: Improper Neutralization of Special Elements used in an SQL Command

elitecms v1.01 is vulnerable to SQL Injection via admin/editpost.php...

PT-2022-20323 · Elitecms · Elitecms

Name of the Vulnerable Software and Affected Versions: elitecms version 1.01 Description: The issue allows deletion of any file via the "/admin/delete image.php?file=" API endpoint. The estimated number of potentially affected devices worldwide is not specified. There is no information about...

CVE-2022-30814: Improper Neutralization of Special Elements used in an SQL Command

elitecms v1.01 is vulnerable to SQL Injection via /admin/addsidebar.php...

CVE-2022-30815: Improper Neutralization of Special Elements used in an SQL Command

elitecms 1.01 is vulnerable to SQL Injection via admin/editsidebar.php?page=2&sidebar=...

CVE-2022-30809: Improper Neutralization of Special Elements used in an SQL Command

elitecms 1.01 is vulnerable to SQL Injection via /admin/editpage.php?page=...

CVE-2022-30816: Improper Neutralization of Special Elements used in an SQL Command

elitecms 1.01 is vulnerable to SQL Injection via /admin/editsidebar.php...

CVE-2022-30804: Improper Limitation of a Pathname to a Restricted Directory

elitecms v1.01 is vulnerable to Delete any file via /admin/deleteimage.php?file=...

CVE-2022-30808: Unrestricted Upload of File with Dangerous Type

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manageuploads.php...