EUVD-2017-1445

Malware in sbrugna...

EUVD-2014-5275

Malware in sbrugna...

CVE-2012-1915

EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xssclean Filter and perform XSS attacks...

Design/Logic Flaw

EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xssclean Filter and perform XSS attacks...

CVE-2012-1915

CVE-2012-1915 affects EllisLab CodeIgniter up to version 2.1.1; CodeIgniter 2.1.2 fixes bypasses of the xss_clean() filter in system/core/Security.php, enabling XSS that could bypass input filtering. Documented bypass vectors include various HTML tag/attribute configurations that bypass the filte...

CVE-2012-1915

EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xssclean Filter and perform XSS attacks...

CVE-2012-1915: Improper Neutralization of Input During Web Page Generation

EllisLab CodeIgniter 2.1.2 allows remote attackers to bypass the xssclean Filter and perform XSS attacks...

PT-2020-7194

Name of the Vulnerable Software and Affected Versions EllisLab CodeIgniter version 2.1.2 Description The issue allows remote attackers to bypass the xss clean filter and perform cross-site scripting XSS attacks. This means an attacker can inject malicious scripts into a website, potentially...

CVE-2017-1000160

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection...

Cross site scripting

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection...

CVE-2017-1000160

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting that results in PHP code injection. Affected product/version is explicitly stated (ExpressionEngine 3.4.2). The impact is described as XSS leading to PHP code execution, with no explicit exploit details, vectors, or affected co...

CVE-2017-1000160

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection...

PT-2017-10858

Name of the Vulnerable Software and Affected Versions EllisLab ExpressionEngine version 3.4.2 Description The issue allows for cross-site scripting, which can result in PHP code injection. Recommendations For EllisLab ExpressionEngine version 3.4.2, update to a newer version that contains a fix f...

CVE-2017-1000160: Improper Neutralization of Input During Web Page Generation

EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection...

EllisLab ExpressionEngine Weak Password Vulnerability

EllisLab ExpressionEngine is the United States EllisLab company's set of content management system CMS, it provides Web publishing, template engine and attachment components and other modules. A security vulnerability exists in EllisLab ExpressionEngine version 2.x prior to 2.11.8 and version 3.x...

EllisLab CodeIgniter Arbitrary Code Execution Vulnerability

EllisLab CodeIgniter is the United States EllisLab company for PHP web developers to use a set of application development framework and toolkit . A security vulnerability exists in the system/libraries/Email.php file in EllisLab CodeIgniter versions prior to 3.1.3. A remote attacker can exploit...

CVE-2014-5387

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...

Sql injection

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...

CVE-2014-5387

EllisLab ExpressionEngine Core is affected by multiple SQL injection vulnerabilities in versions prior to 2.9.1. An authenticated attacker can abuse vulnerable parameters (column_filter, category[] in system/index.php; tbl_sort[0][] in the comment module’s system/index.php) to execute arbitrary S...

CVE-2014-5387

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 columnfilter or 2 category parameter to system/index.php or the 3 tblsort0 parameter in the comment module to system/index.php...