170 matches found
ExpressionEngine: Low privileges (auth) Remote Command Execution - PHP file upload bypass.
The ExpressionEngine software was vulnerable to a remote command execution flaw due to a bypass in the file upload extension check, which allowed a low-privileged user to execute arbitrary commands...
ExpressionEngine: Open Redirect in comment section
@winst0n13 discovered that the URL you are redirected to after successfully submitting a comment could be modified in certain circumstances. @winst0n13 gave a detailed report with step-by-step instructions for replicating, enabling a speedy resolution to the issue...
TotalComfortSolutions Company 1.0 SQL Injection
Exploit Title : TotalComfortSolutions Company 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepages : totalcomfortsolutions.com Tested On : Windows and Linux Exploit Risk : Medium Category : WebApps Version Information : jQuery 1.4.11 - CodeIgniter -...
CVE-2018-17874
ExpressionEngine before 4.3.5 has reflected XSS...
CVE-2018-17874
ExpressionEngine before 4.3.5 has reflected XSS...
Cross site scripting
ExpressionEngine before 4.3.5 has reflected XSS...
CVE-2018-17874
ExpressionEngine before 4.3.5 has reflected XSS...
CVE-2018-17874
CVE-2018-17874 concerns ExpressionEngine prior to version 4.3.5, which has a reflected XSS vulnerability. The connected records confirm the affected product and the vulnerability type; a remediation path is evidenced by the changelog entry for version 4.3.5. No explicit exploitation details, affe...
CVE-2018-17874: Improper Neutralization of Input During Web Page Generation
ExpressionEngine before 4.3.5 has reflected XSS...
ExpressionEngine: License verification mechanism can be bypassed
@unbaiat discovered that an invalid license file could be accepted as valid in certain circumstances. @unbaiat gave a detailed report with step-by-step instructions for replicating, enabling a speedy resolution to the issue...
ExpressionEngine: Persistent XSS via malicious license file
@unbaiat discovered that the display of the license file information was not properly sanitized leaving it vulnerable to XSS. @unbaiat gave a detailed report with step-by-step instructions for replicating, enabling a speedy resolution to the issue...
ExpressionEngine: XML Member Proccessing - Local File inclusion Vulnerability
@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a the...
ExpressionEngine: Import File Converter - local File inclusion
@lawrenceamer discovered a local file inclusion vulnerability that logged in users with access to the control panel and permission to access developer utilities may be able to exploit. @lawrenceamer gave a detailed report with step-by-step instructions for replicating and screen captures of a the...
ExpressionEngine: [EE] Spoof the redirect process
The original report was not a security issue, but that did lead the reporter to discovering that a user could potentially be tricked by nesting redirects so that they first redirected to the site itself, which would allow the second redirect to occur without warning the user that they were being...
ExpressionEngine: [EE] change the author of post using the author_id
@flex0geek discovered that users with permission to edit entries in the control panel could manipulate the form or POST submission and set an invalid author as the author of that entry. @flex0geek gave a detailed report with step-by-step instructions for replicating and screen captures of a their...
ExpressionEngine: RCE By import channel field
The reporter determined that a malicious Channel Set could be used to allow an administrator to upload a PHP file that they might otherwise not have permission to upload. Combined with the temporary folder name algorithm being available in the source code, the malicious administrator could...
EllisLab ExpressionEngine Cross-Site Scripting Vulnerability
EllisLab ExpressionEngine is the United States EllisLab company's set of content management system CMS, it provides Web publishing, template engine and attachment components and other modules. A cross-site scripting vulnerability exists in EllisLab ExpressionEngine version 3.4.2. A remote attacke...
CVE-2017-1000160
EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection...