Elitecms: Security Vulnerabilities
Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.
CVSS Score
6.1
EPSS Score
0.003
Published
2024-01-11
A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.
CVSS Score
8.8
EPSS Score
0.011
Published
2023-09-20
elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.
CVSS Score
6.5
EPSS Score
0.004
Published
2022-06-02
elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.
CVSS Score
9.8
EPSS Score
0.012
Published
2022-06-02
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-06-02
Page 1