CVE-2016-9285

CVE-2016-9285 affects Exponent CMS v2.4.0, specifically the framework/modules/addressbook/controllers/addressController.php. It allows remote attackers to read user information by altering the id parameter (example: address/edit/id/1), indicating an information-disclosure vulnerability related to...

CVE-2016-9284

CVE-2016-9284 affects Exponent CMS v2.4.0. The vulnerability resides in getUsersByJSON in framework/modules/users/controllers/usersController.php and allows remote attackers to read user information by calling users/getUsersByJSON/sort/ with a trailing string. This is an information disclosure is...

CVE-2016-9284

getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via users/getUsersByJSON/sort/ and a trailing string...

CVE-2016-9283

CVE-2016-9283 affects Exponent CMS v2.4.0 and is due to an SQL injection in framework/core/subsystems/expRouter.php, enabling remote attackers to read database information via address/addContentToSearch/id/ and a trailing string related to the sef URL mechanism. Multiple feeds (NVD entry, CNVD/CV...

CVE-2016-9286

The CVE-2016-9286 issue affects Exponent CMS v2.4.0patch1, specifically the framework/modules/users/controllers/usersController.php component. The root cause is improper access controls that allow remote attackers to read user address information, demonstrated via address/show/id/1. Multiple sour...

Sql injection

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9272

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9272

Exponent CMS before version 2.4.0 contains a blind SQL injection via the rerank array parameter that can lead to partial database information disclosure and denial of service. This is documented across CVE-2016-9272 entries (NVD, CNVD/OSV). The core issue is an injectable parameter in the rerank ...

CVE-2016-9286: Exposure of Sensitive Information to an Unauthorized Actor

framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI...

CVE-2016-9288: Improper Neutralization of Special Elements used in an SQL Command

In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without any filtration which caused SQL injection. The payload can be used like this: /navigation/DragnDropReRank/target/1...

CVE-2016-9283: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

CVE-2016-9285: Exposure of Sensitive Information to an Unauthorized Actor

framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id number, as demonstrated by address/edit/id/1, related to an "addresses, countries, and regions" issue...

CVE-2016-9282: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

CVE-2016-9272: Improper Neutralization of Special Elements used in an SQL Command

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

PT-2016-7724

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0patch1 Description The issue allows remote attackers to read address information due to improper access restriction to user records. This can be demonstrated by accessing the "address/show/id/1" URI. Recommendations F...

PT-2016-7721

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read database information. This is related to a "sef URL" issue in the address/addContentToSearch/id/ endpoint. Recommendations For Exponent CMS version 2.4.0, update ...

PT-2016-7723

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read user information by modifying the id number. This is related to an issue with "addresses, countries, and regions". An example of exploitation is via the endpoint...