CVE-2021-27230

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save to write to an lang.php file under the system/user/language directory...

Packet Tide ExpressionEngine security vulnerability

Packet Tide ExpressionEngine is a content management system developed by the American company Packet Tide. There is a security vulnerability in Packet Tide ExpressionEngine, and this vulnerability stems from the fact that authenticated administrator users are vulnerable to SQL injection attacks...

EUVD-2008-0214

Malware in sbrugna...

EUVD-2017-1445

Malware in sbrugna...

EUVD-2021-13995

Malware in sbrugna...

EUVD-2020-5696

Malware in sbrugna...

EUVD-2014-5275

Malware in sbrugna...

EUVD-2006-0468

Malware in sbrugna...

EUVD-2018-9616

Malware in sbrugna...

EUVD-2009-1071

Malware in sbrugna...

EUVD-2020-29113

Malware in sbrugna...

EUVD-2008-0213

Malware in sbrugna...

EUVD-2017-1250

Malware in sbrugna...

EUVD-2023-27054

Malicious code in bioql PyPI...

EUVD-2024-16527

Malicious code in bioql PyPI...

EUVD-2024-37340

Malicious code in bioql PyPI...

ExpressionEngine: SQL injection in structure plugin

An SQL injection flaw was discovered in ExpressionEngine's Structure plugin. User input from the channelids parameter was passed directly into SQL queries without proper sanitization. The vulnerability required admin panel access...

CVE-2024-0738

A vulnerability, which was classified as critical, has been found in 个人开源 mldong 1.0. This issue affects the function ExpressionEngine of the file com/mldong/modules/wf/engine/model/DecisionModel.java. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has...

CVE-2023-22953

In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user...

CVE-2020-8242

Unsanitized user input in ExpressionEngine = 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/admin control panel access to execute the attack...