CVE-2024-51242

A Server-Side Request Forgery SSRF vulnerability has been identified in eladmin 2.7 and earlier in ServerDeployController.java. The manipulation of the HTTP Body ip parameter leads to SSRF...

PT-2024-34571 · Eladmin · Eladmin

Name of the Vulnerable Software and Affected Versions: eladmin versions 2.7 and earlier Description: The issue allows for remote code execution RCE that can control all application deployment servers of the management system. This is achieved via the DeployController.java file. Recommendations: F...

CVE-2024-51243

The eladmin v2.7 and before contains a remote code execution RCE vulnerability that can control all application deployment servers of this management system via DeployController.java...

CVE-2024-44676

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

CVE-2024-44676

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

CVE-2024-44676

CVE-2024-44676 affects eladmin v2.7 and earlier. The vulnerability is described as a Cross Site Scripting (XSS) flaw that allows an attacker to execute arbitrary code via LocalStoreController.java. Public documents provide multiple attestations of this issue (NVD/NVD-derived metrics and Red Hat/O...

CVE-2024-44677

Summary (CVE-2024-44677) eladmin v2.7 and earlier is vulnerable to Server-Side Request Forgery (SSRF) via the DatabaseController.java component, enabling an attacker to execute arbitrary code. This aligns with Red Hat and CVE records describing a high-severity, network-based impact with no privil...

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

ELADMIN security vulnerabilities

ELADMIN is a backend management system for elunez Personal Developer. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which stems from vulnerability to a server-side request forgery SSRF attack that allows an attacker to execute arbitrary code via the DatabaseController.java...

CVE-2024-44677: Server-Side Request Forgery (SSRF)

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

CVE-2024-44676: Improper Neutralization of Input During Web Page Generation

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

CVE-2024-44676

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

CVE-2024-44677

eladmin v2.7 and before is vulnerable to Server-Side Request Forgery SSRF which allows an attacker to execute arbitrary code via the DatabaseController.java component...

ELADMIN security vulnerabilities

ELADMIN is a backend management system for elunez personal developers. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which stems from vulnerability to cross-site scripting XSS attacks and allows attackers to execute arbitrary code via LocalStoreController.java...

CVE-2024-44676

eladmin v2.7 and before is vulnerable to Cross Site Scripting XSS which allows an attacker to execute arbitrary code via LocalStoreController. java...

PT-2024-31205

Name of the Vulnerable Software and Affected Versions eladmin versions 2.7 and earlier Description The issue allows an attacker to execute arbitrary code via LocalStoreController.java, which is vulnerable to Cross Site Scripting XSS. Recommendations For eladmin versions 2.7 and earlier, at the...

PT-2024-31206

Name of the Vulnerable Software and Affected Versions eladmin versions 2.7 and before Description The issue allows an attacker to execute arbitrary code via the DatabaseController.java component. This is due to a Server-Side Request Forgery SSRF vulnerability. Recommendations For eladmin versions...

CVE-2024-7458

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown processing of the file /api/deploy/upload /api/database/upload of the component Database Management/Deployment Management. The manipulation of the argument file leads to path traversa...