Skip to content
OpenAdvisories

Package · Packagist

elefant/cms

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-16975

    Elefant CMS PHP Code Execution Vulnerability

    An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with <?php content, because of insufficient input valida…

    elefant/cms Packagist
  • Critical 9.8
    CVE-2018-16974

    Elefant CMS Code Execution Vulnerability

    An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in apps/filemanager/upload/drop.php by using /filemanager/api/rm/.htaccess to remove the .htaccess file, and then using a filename that ends in .php followed by s…

    elefant/cms Packagist
  • Critical 9.8
    CVE-2018-15601

    Elefant CMS Improper Input Validation

    apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.

    elefant/cms Packagist