Elefantcms

14 CVEs across 3 Elefantcms products. Browse Elefantcms vulnerabilities, severities, and proof-of-concept exploits.

Elefantcms products with known CVEs

ProductCVEs
Elefant Cms7
Elefantcms5
Elefant2
Elefantcms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2017-20064Medium6.32022-06-20A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /d…
CVE-2017-20063Medium6.32022-06-20A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /filemanager/upload/drop of…
CVE-2017-20062Medium5.02022-06-20A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-s…
CVE-2017-20061Medium4.32022-06-20A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /admin/extended. The…
CVE-2017-20060Low3.52022-06-20A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The…
CVE-2017-20059Low3.52022-06-20A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the comp…
CVE-2017-20058Medium4.32022-06-20A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Versi…
CVE-2017-20057Medium4.32022-06-20A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username l…
CVE-2018-16975Critical9.82018-09-12An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in t…
CVE-2018-16974Critical9.82018-09-12An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/…
CVE-2018-16387High8.82018-09-03An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.
CVE-2018-15601Critical9.82018-08-21apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.
CVE-2012-65212013-01-24Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTM…
CVE-2012-12962012-08-26Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow…