CVE-2022-40361中 6.1Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/log…
CVE-2023-42331高 8.8A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.
CVE-2022-30816緊急 9.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
CVE-2022-30815緊急 9.8elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=
CVE-2022-30814緊急 9.8elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.