CVE-2023-42331

A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manageuploads.php component...

CVE-2022-30808

CVE-2022-30808 affects elitecms 1.0.1. The vulnerability is described as an arbitrary code execution via admin/manage_uploads.php. The NVD entry lists a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, no privileges required, no user interaction, and high impact on confidentiality, int...

Code injection

eliteCMS v1.0 is vulnerable to Insecure Permissions via manageuploads.php...