ExpressionEngine: Arbitrary forum topic close with GET CSRF.

The vulnerability allowed attackers to open or close forum threads by exploiting the lack of CSRF protection...

ExpressionEngine: Arbitrary comment content change with GET CSRF.

The vulnerability in Expression Engine 6.0.1 allowed unauthorized modification of comments through improperly protected requests...

ExpressionEngine: Stored XSS filter bypass on discussion forum. "URL" tag.

A vulnerability was identified and fixed that could have allowed attackers to bypass the XSS filter in the discussion forum, enabling arbitrary JavaScript execution in the victim's browser...

ExpressionEngine: Stored XSS filter bypass on discussion forum.

A vulnerability was identified and fixed that could have allowed attackers to bypass the XSS filter in the discussion forum, enabling arbitrary JavaScript execution in the victim's browser...

ExpressionEngine: Non-authenticated path traversal leading to arbitrary file read

Non-authenticated path traversal leading to arbitrary file read. Insufficient user input filtering resulted in arbitrary file read by non-authenticated attacker, leading to sensitive information disclosure...

ExpressionEngine: PHP Code Injection through "Translate::save()" method

A vulnerability was identified and fixed that could have allowed attackers to inject and execute arbitrary PHP code through improperly sanitized user input...

ExpressionEngine: SQL injection at /admin.php?/cp/members/create

SQL injection vulnerability in the control panel. This is limited to users who have access to the control panel, and the ability to create members...

PACKET TIDE ExpressionEngine Code Issue Vulnerability

PACKET TIDE ExpressionEngine is the U.S. PACKET TIDE company's set of open source content management system CMS. A security vulnerability exists in PACKET TIDE ExpressionEngine versions prior to 5.3.2. A remote attacker can exploit the vulnerability to execute arbitrary code...

CVE-2020-13443

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges member is able to upload this. It is possible to bypass the MIME type check and file-extension check...

CVE-2020-13443

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges member is able to upload this. It is possible to bypass the MIME type check and file-extension check...

Design/Logic Flaw

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges member is able to upload this. It is possible to bypass the MIME type check and file-extension check...

CVE-2020-13443

ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges member is able to upload this. It is possible to bypass the MIME type check and file-extension check...

CVE-2020-13443

ExpressionEngine before 5.3.2 is affected: remote attackers can upload and execute arbitrary code by bypassing MIME type and file-extension checks during Compose Msg, Add attachment, and Save As Draft actions. A low-privilege member can exploit this, with direct access to uploaded PHP files. The ...

ExpressionEngine: Low privileges (auth) Remote Command Execution - PHP file upload bypass.

The ExpressionEngine software was vulnerable to a remote command execution flaw due to a bypass in the file upload extension check, which allowed a low-privileged user to execute arbitrary commands...

ExpressionEngine: Open Redirect in comment section

@winst0n13 discovered that the URL you are redirected to after successfully submitting a comment could be modified in certain circumstances. @winst0n13 gave a detailed report with step-by-step instructions for replicating, enabling a speedy resolution to the issue...

TotalComfortSolutions Company 1.0 SQL Injection

Exploit Title : TotalComfortSolutions Company 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepages : totalcomfortsolutions.com Tested On : Windows and Linux Exploit Risk : Medium Category : WebApps Version Information : jQuery 1.4.11 - CodeIgniter -...

CVE-2018-17874

ExpressionEngine before 4.3.5 has reflected XSS...

CVE-2018-17874

ExpressionEngine before 4.3.5 has reflected XSS...

Cross site scripting

ExpressionEngine before 4.3.5 has reflected XSS...

CVE-2018-17874

CVE-2018-17874 concerns ExpressionEngine prior to version 4.3.5, which has a reflected XSS vulnerability. The connected records confirm the affected product and the vulnerability type; a remediation path is evidenced by the changelog entry for version 4.3.5. No explicit exploitation details, affe...