Lucene search
+L

4 matches found

NVD
NVD
•added 2021/03/15 11:15 p.m.•26 views

CVE-2021-27230

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save to write to an lang.php file under the system/user/language directory...

8.8CVSS0.02832EPSS
SaveExploits3References5
OSV
OSV
•added 2021/03/15 11:15 p.m.•36 views

CVE-2021-27230

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save to write to an lang.php file under the system/user/language directory...

8.8CVSS7.2AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2021/03/15 10:52 p.m.•37 views

CVE-2021-27230

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save to write to an lang.php file under the system/user/language directory...

9.1AI score0.02832EPSS
SaveExploits3References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/15 12:00 a.m.•7 views

CVE-2021-27230: Improper Control of Generation of Code

ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save to write to an lang.php file under the system/user/language directory...

8.8CVSS5.8AI score0.02832EPSS
SaveExploits3References2
Rows per page
Query Builder