Xpressengine vulnerabilities

Products

• Xpressengine 4

Newest

• xpressengine XpressEngine Update Query sql injection CVE-2011-10003 5.5 MediumFebruary 7, 2023
• xpressengine, xehub xe3 xpresesengine +1 more XpressEngine file upload vulnerability CVE-2021-26642 Fix available 8.8 HighJanuary 20, 2023
• xpressengine In XE 1.116, when uploading the Normal button, there is no restriction on the file suffix, which... CVE-2021-44912 5.4 MediumFebruary 9, 2022
• xpressengine XE before 1.11.6 is vulnerable to Unrestricted file upload via modules/menu/menu.admin.controller... CVE-2021-44911 5.4 MediumFebruary 9, 2022
• xpressengine zeroboard lib.php in Zeroboard 4.1 pl7 allows remote attackers to execute arbitrary PHP code via a crafted... CVE-2009-4834 Public exploit 6.8 MediumMay 4, 2010