EllisLab / ExpressionEngine

1 CVE

CVE ID	Description	Severity	CVSS	Published
CVE-2017-0897	ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to rem…	HIGH	7.5	Jun 22, 2017
CVE-2014-5387	Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1)…	MEDIUM	6.5	Nov 4, 2014

Rows per page

Showing 1 to 1 of 1 CVEs