What’s Vulnerable › Vulnerabilities

CVE-2014-5387

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-11-04 · updated 2026-06-17
• Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) column_filter or (2) category[] parameter to system/index.php or the (3) tbl_sort[0][] parameter in the comment module to system/index.php.

Affected products

• EllisLab Expressionengine: 2..5.4, 2.0.0-public_beta, 2.0.1-public_beta, 2.0.2-public_beta, 2.3.1, 2.5.5 (+4)
• ExpressionEngine: through 2.9.0; 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5 (+13)

References

• http://packetstormsecurity.com/files/128946/EllisLab-ExpressionEngine-Core-SQL-Injection.html
• http://seclists.org/fulldisclosure/2014/Nov/2
• http://www.securityfocus.com/bid/70875
• https://ellislab.com/expressionengine/user-guide/about/changelog.html
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5387
• http://packetstormsecurity.com/files/128946/EllisLab-ExpressionEngine-Core-SQL-Injection.html
• http://seclists.org/fulldisclosure/2014/Nov/2
• http://www.securityfocus.com/bid/70875
• https://ellislab.com/expressionengine/user-guide/about/changelog.html
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-5387

Get alerted when CVE-2014-5387 or the next vulnerability affects your stack