CVE-2014-5387 Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) column_filter or (2) category[] paramete...
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) column_filter or (2) category[] parameter to system/index.php or the (3) tbl_sort[0][] parameter in the comment module to system/index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ellislab expressionengine | = 2..5.4 | No fix listed |
| ellislab expressionengine | = 2.0.0-public_beta | No fix listed |
| ellislab expressionengine | = 2.0.1-public_beta | No fix listed |
| ellislab expressionengine | = 2.0.2-public_beta | No fix listed |
| ellislab expressionengine | = 2.3.1 | No fix listed |
| ellislab expressionengine | = 2.5.5 | No fix listed |
| ellislab expressionengine | = 2.6.1 | No fix listed |
| ellislab expressionengine | = 2.7.1 | No fix listed |
| ellislab expressionengine | = 2.7.2 | No fix listed |
| ellislab expressionengine | = 2.8.1 | No fix listed |
| expressionengine | <= 2.9.0 | No fix listed |
| expressionengine | = 2.1.0 | No fix listed |
| expressionengine | = 2.1.1 | No fix listed |
| expressionengine | = 2.1.2 | No fix listed |
| expressionengine | = 2.1.3 | No fix listed |
| expressionengine | = 2.1.4 | No fix listed |
| expressionengine | = 2.1.5 | No fix listed |
| expressionengine | = 2.2.0 | No fix listed |
| expressionengine | = 2.2.1 | No fix listed |
| expressionengine | = 2.2.2 | No fix listed |
| expressionengine | = 2.3.0 | No fix listed |
| expressionengine | = 2.4.0 | No fix listed |
| expressionengine | = 2.5.0 | No fix listed |
| expressionengine | = 2.5.1 | No fix listed |
| expressionengine | = 2.5.2 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| expressionengine | = 2.5.3 | No fix listed |
| expressionengine | = 2.6.0 | No fix listed |
| expressionengine | = 2.7.0 | No fix listed |
| expressionengine | = 2.7.3 | No fix listed |
| expressionengine | = 2.8.0 | No fix listed |
References
- packetstormsecurity.com exploit
- 20141103 CVE-2014-5387 - Multiple Authenticated SQL Injections in EllisLab ExpressionEngine Core exploit mailing-list
- 70875 exploit vdb-entry
- ellislab.com
- www.portcullis-security.com exploit