Export limit exceeded: 21745 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 17

Export CSV
CVE-2022-40361

Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2023-42331

A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30816

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30815

elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30814

elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30813

elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30810

elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30809

elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30808

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.

CVSS 3.1 · 9.8 Critical EPSS 17.5% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-30804

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-24222

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_user.php.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-24221

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/functions/functions.php.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-24220

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_post.php.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-24219

eliteCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin/edit_page.php.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2022-24218

An issue in /admin/delete_image.php of eliteCMS v1.0 allows attackers to delete arbitrary files.

CVSS 3.1 · 9.1 Critical EPSS 17.0% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2021-46093

eliteCMS v1.0 is vulnerable to Insecure Permissions via manage_uploads.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms
CVE-2018-12250

An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.

CVSS 3.0 · 7.2 High EPSS 1.6% KEV · Not listed
Vendors
Elitecms
Products
Elite Cms