CVE-2009-1070

概要

参考情報

• expressionengine.com/docs/changelog.html
• secunia.com/advisories/34379 · Vendor Advisory
• ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting · Exploit
• securityfocus.com/archive/1/502045/100/0/threaded
• securityfocus.com/bid/34193 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/49359

expressionengine のその他の脆弱性

• CVE-2025-59473高 7.2SQL Injection vulnerability in the Structure for Admin authenticated user
• CVE-2024-38454中 6.1ExpressionEngine before 7.4.11 allows XSS.
• CVE-2023-22953高 8.8In ExpressionEngine before 7.2.6, remote code execution can be achieved by an authenticated Control Panel user.
• CVE-2020-8242高 7.2Unsanitized user input in ExpressionEngine <= 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/…
• CVE-2021-33199緊急 9.8In Expression Engine before 6.0.3, addonIcon in Addons/file/mod.file.php relies on the untrusted input value of input->get('file') instead o…