CVE Tools
Track your stack

Elkagroup

4 CVEs tracked since 2007. Since Jun 2007, none of them reached CISA KEV.

Elkagroup CVEs per month

Jun 2007 to Jan 2010. Point at a month, or focus the strip and use the arrow keys.
Elkagroup CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2007-0610
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-1110
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-03null or fewer
2009-0410
2009-05null or fewer
2009-06null or fewer
2009-07null or fewer
2009-08null or fewer
2009-09null or fewer
2009-10null or fewer
2009-11null or fewer
2009-12null or fewer
2010-0110

Products

The products that kept showing up in Elkagroup's monthly top three, with their CVEs summed over those months.

  1. Image Gallery44 months

Latest CVEs

The 5 most recently published vulnerabilities affecting Elkagroup.

  1. CVE-2009-4569SQL injection vulnerability in elkagroup Image Gallery allows remote attackers to execute arbitrary SQL commands via the id parameter to the default URI under news/.7.5
  2. CVE-2009-2930Cross-site scripting (XSS) vulnerability in the Search feature in elka CMS (aka Elkapax) allows remote attackers to inject arbitrary web script or HTML via the q parameter to the default URI.4.3
  3. CVE-2009-1446Unrestricted file upload vulnerability in upload.php in Elkagroup Image Gallery 1.0 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, the...6.5
  4. CVE-2008-5037SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter.7.5
  5. CVE-2007-3461SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.7.5

The record

Peak rank
#80 in Jan 2010
Busiest month shown
Jun 2007, 1 CVEs
Months with a KEV entry
0 since Jun 2007
Monthly snapshots
4 since 2007
Elkagroup's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store