Element-IT Software HTTP Commander 5.3.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:element-it:http_commander:5.3.3:*:*:*:*:*:*:*

part: a version: 5.3.3 update: *

VendorElement It (710f0a95-8ad4-50e8-b601-4fed662d319c)
ProductHttp Commander (996dc9c3-3861-5add-9ab2-a215338d349d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33213 vulnerable 2026-06-08 05:32:11.014974 Details available
An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address.
Published: 2021-07-14T13:40:09.000Z
Updated: 2024-08-03T23:42:20.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33212 vulnerable 2026-06-08 05:32:11.014654 Details available
A Cross-site scripting (XSS) vulnerability in the "View in Browser" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted SVG image.
Published: 2021-07-14T13:44:08.000Z
Updated: 2024-08-03T23:42:20.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33211 vulnerable 2026-06-08 05:32:11.014246 Details available
A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary directories via relative paths in ZIP archives.
Published: 2021-07-14T13:48:26.000Z
Updated: 2024-08-03T23:42:20.276Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.