Xpressengine

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xpressengine records in CISA KEV

No Xpressengine vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Zeroboard · all components

TI-2009-04590 CVE-2009-4834 · GHSA-2qjg-hjm9-x7mg

LOW 37

lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted parameter name, possibly related to now_connect.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04024 Published 2010-05-04 No fix listed CWE-94