197 matches found
PT-2022-16540
Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0 Description An issue in the "/admin/delete image.php" endpoint of eliteCMS allows attackers to delete arbitrary files. Recommendations For eliteCMS version 1.0, consider restricting access to the "/admin/delete image.php"...
PT-2022-16545
Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the "/admin/edit user.php" API endpoint. Recommendations For eliteCMS version 1.0, as a temporary workaround,...
PT-2022-12564
Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0 Description The issue concerns Insecure Permissions, specifically via the manage uploads.php file. This allows for potential unauthorized access or modifications. Recommendations For eliteCMS version 1.0, consider...
CVE-2022-24221: Improper Neutralization of Special Elements used in an SQL Command
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php...
CVE-2022-24222: Improper Neutralization of Special Elements used in an SQL Command
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edituser.php...
CVE-2022-24219: Improper Neutralization of Special Elements used in an SQL Command
eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/editpage.php...
CVE-2022-24218: Undefined Security Weakness
An issue in /admin/deleteimage.php of eliteCMS v1.0 allows attackers to delete arbitrary files...
CVE-2021-46093: Incorrect Default Permissions
eliteCMS v1.0 is vulnerable to Insecure Permissions via manageuploads.php...
PT-2022-16544
Name of the Vulnerable Software and Affected Versions eliteCMS version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the /admin/functions/functions.php endpoint. Recommendations For eliteCMS version 1.0, consider restricting access to the...
elitecms 1.01 (sql/xss) Multiple Vulnerabilities
No description provided by source. eliteCMS 1.01 SQL/XSS Multiple Remote Vulns by xenohive greets to daganarus, dearest of all my friends. SQL injection requires magicquotes = off -/includes/functions.php --------------------------------- 89. function getpagesettings ... 92. $query = SELECT FROM...
eliteCMS 1.0 'page' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30990/info eliteCMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or exploit...
eliteCMS installation file did not validate + the word written to the security vulnerability-vulnerability warning-the black bar safety net
eliteCMS installation program after the installation is not locked, cause hackers can access setup addresses repeat the installation 另外 一 个 漏洞 是 安装 程序 可以 直接 写 入 一句话 到 admin/includes/config.php We look at the code: ... elseif $GET'step' == "4" $file = "../admin/includes/config.php"; $write = "?...
eliteCMS Multiple Cross Site Scripting Vulnerabilities
eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...
eliteCMS Multiple Cross Site Scripting Vulnerabilities
eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...
eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities
eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41537/info eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An...
eliteCMS 1.01 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/41537/info eliteCMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage these issues to execute arbitrary script cod...
eliteCMS 1.01 Cross Site Request Forgery
Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...
eliteCMS Cross Site Scripting
Vulnerability ID: HTB22354 Reference: http://www.htbridge.ch/advisory/xssinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 18 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...
XSRF (CSRF) in eliteCMS
Vulnerability ID: HTB22355 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 19 April 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vend...
XSS in eliteCMS
Vulnerability ID: HTB22354 Reference: http://www.htbridge.ch/advisory/xssinelitecms.html Product: eliteCMS Vendor: Elite Graphix Vulnerable Version: 1.01 and Probably Prior Versions Vendor Notification: 18 April 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...