779 matches found
PT-2019-7847
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue is related to a sql injection vulnerability. It is located in the framework/modules/help/controllers/helpController.php file. Recommendations For Exponent CMS version 2.3.9, update to a newer...
Exponent CMS 2.4.1 Patch 5 - Privilege Escalation Vulnerability
Exponent CMS allows rogue admins to elevate their privileges. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Exponent CMS 2.3.9 Multiple Vulnerabilities
ExponentCMS is prone to multiple vulnerabilities that have their source in the Pixidou Image Editor component. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Exponent CMS 2.3 Multiple File Upload Vulnerabilities
Exponent CMS 2.3 is prone to multiple vulnerabilities due to oversights in the file upload functionality. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Design/Logic Flaw
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
CVE-2016-7443 affects Exponent CMS, versions 2.3.0 to 2.3.9. The issue is a vulnerable file upload path that could allow a remote attacker to impact the system via uploading files to the wrong location. The vulnerability description is supported by multiple feeds and references, indicating a secu...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
OIC Exponent CMS Elevation of Privilege Vulnerability
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A security vulnerability exis...
PT-2018-4986
Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.3.0 through 2.3.9 Description The issue allows remote attackers to have an unspecified impact related to uploading files to the wrong location. Recommendations For Exponent CMS versions 2.3.0 through 2.3.9, update to a...
CVE-2016-7443: Unrestricted Upload of File with Dangerous Type
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2017-18213
In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...
CVE-2017-18213
In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...
Code injection
In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...
CVE-2017-18213
In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...
CVE-2017-18213
CVE-2017-18213 affects Exponent CMS prior to 2.4.1 Patch #6. The vulnerability allows certain admin users to elevate their privileges, constituting a privilege-escalation issue. The CVSS metrics in the provided sources indicate a high impact (CONFIDENTIALITY, INTEGRITY, and AVAILABILITY affected;...
PT-2018-6741
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.4.1 Patch 6 Description: The issue allows certain admin users to elevate their privileges. Recommendations: For versions prior to 2.4.1 Patch 6, update to version 2.4.1 Patch 6 or later to resolve the issue...