Vulnerabilities

TI-2017-00845 CVE-2017-0897 · GHSA-cqj4-ph2f-7q79

ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing…

MEDIUM 40

ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04042 Published 2017-06-22 No fix listed CWE-330

TI-2014-04390 CVE-2014-5387 · GHSA-2rf3-3mwr-3pqg

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow…

LOW 32

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) column_filter or (2) category[] parameter to system/index.ph…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01649 Published 2014-11-04 No fix listed CWE-89

Vulnerabilities

Filters

ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing…

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow…