Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2014-5387
Disclosure Date: November 04, 2014 (last updated October 05, 2023)
Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) column_filter or (2) category[] parameter to system/index.php or the (3) tbl_sort[0][] parameter in the comment module to system/index.php.
0
Attacker Value
Unknown
CVE-2009-1070
Disclosure Date: March 26, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter.
0
Attacker Value
Unknown
CVE-2008-0201
Disclosure Date: January 10, 2008 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameter.
0
Attacker Value
Unknown
CVE-2008-0202
Disclosure Date: January 10, 2008 (last updated October 04, 2023)
CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the URL parameter.
0
