← Back

Elkarbackup

elkarbackup

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Elkarbackup
elkarbackup
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-35249
1Elkarbackup
1Elkarbackup
Jun 17, 2026
Nov 2, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross Site Scripting (XSS) vulnerability in ElkarBackup 1.3.3, allows attackers to execute arbitrary code via the name parameter to the add client feature.
CVE-2020-24925
1Elkarbackup
1Elkarbackup
Jun 17, 2026
Sep 15, 2020
N/A· v4
7.5 HIGH· v3
3.5 LOW· v2
A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself hel...Show more
A Sensitive Source Code Path Disclosure vulnerability is found in ElkarBackup v1.3.3. An attacker is able to view the path of the source code jobs/sort where entire source code path is displayed in the browser itself helping the attacker identify the code structure /app/elkarbackup/src/Binovo/ElkarBackupBundle/Controller/DefaultController.phpShow less
CVE-2020-24924
1Elkarbackup
1Elkarbackup
Jun 17, 2026
Sep 15, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A Persistent Cross-site Scripting vulnerability is found in ElkarBackup v1.3.3, where an attacker can steal the user session cookie using this vulnerability present on Policies >> action >> Name Parameter