1207 matches found
Exponent CMS File Upload Vulnerability
Exponent CMS employs an intuitive and flexible content editing system that allows website pages to be edited on-page as it is displayed. A file upload vulnerability exists in Exponent CMS due to a failure to properly validate user input. This allows attackers to exploit the vulnerability to uploa...
Exponent CMS 2.3.9 - Blind SQL Injection
Exponent CMS 2.3.9 - Blind SQL Injection ============================================= MGC ALERT 2016-005 - Original release date: September 09, 2016 - Last revised: September 20, 2016 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2016-7400...
Exponent CMS 2.3.9 - Blind SQL Injection Vulnerability
Exploit for php platform in category web applications ============================================= MGC ALERT 2016-005 - Original release date: September 09, 2016 - Last revised: September 20, 2016 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2016-7400...
Exponent CMS 2.3.9 - Blind SQL Injection
============================================= MGC ALERT 2016-005 - Original release date: September 09, 2016 - Last revised: September 20, 2016 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2016-7400 ============================================= I...
ExponentCMS SQL Injection Vulnerability (CNVD-2016-08089)
Exponent CMS is a free, open source, modular PHP-based content management system. Exponent CMS suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...
Exponent CMS 2.3.9 Blind SQL Injection
============================================= MGC ALERT 2016-005 - Original release date: September 09, 2016 - Last revised: September 20, 2016 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2016-7400 ============================================= I...
Exponent CMS Directory Traversal Vulnerability
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A directory traversal...
OIC Exponent CMS Arbitrary File Upload Vulnerability
OIC Exponent CMS is a free, open source, modular PHP-based content management system CMS from the OIC Group of companies in the United States. An arbitrary file upload vulnerability exists in OIC Exponent CMS version 2.3.8 and below, which can be exploited by attackers to upload backdoor files...
Aruba Networks / Alcatel-Lucent Private Key Disclosure
This advisory is accompanied by a blog post regarding a recap on our published "House of Keys" research study on the re-use of cryptographic secrets from 11/2015. For further information also see http://blog.sec-consult.com/2016/09/house-of-keys-9-months-later-40-worse.html SEC Consult...
Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability
Document Title: =============== Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1886 Release Date: ============= 2016-07-27 Vulnerability Laboratory ID VL-ID: ====================================...
Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability
Document Title: =============== Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1886 Release Date: ============= 2016-07-26 Vulnerability Laboratory ID VL-ID: ====================================...
OIC Exponent CMS Cross-Site Scripting Vulnerability
OIC Exponent CMS is a free, open source, modular PHP-based content management system CMS from the OIC Group of companies in the United States. A cross-site scripting vulnerability exists in OIC Exponent CMS version 2.3.5, which can be exploited by an attacker to inject arbitrary Web script or HTM...
Exponent CMS 2.3.5 Cross Site Scripting
CVE-2015-8667 - Exponent CMS 2.3.5 Multiple Cross Site Scripting Vulnerabilities Product : Exponent CMS CVE : CVE-2015-8667 Author : Sachin Wagh Affected Version : Exponent CMS 2.3.5 Fixed Version: Exponent CMS 2.3.7 ============================================================================...
Exponent CMS 2.3.5 File Upload Cross Site Scripting
CVE-2015-8684 - Exponent CMS 2.3.5 File Upload Cross Site Scripting Vulnerability Product : Exponent CMS CVE : CVE-2015-8684 Author : Sachin Wagh Affected Version : Exponent CMS 2.3.5 Fixed Version: Exponent CMS 2.3.7 ============================================================================...
OIC Exponent CMS Remote Code Execution Vulnerability
OIC Exponent CMS is a free, open source, modular PHP-based content management system. A security vulnerability exists in OIC Exponent CMS that allows remote attackers to submit a special request to execute arbitrary PHP code in the context of an affected system...
DEBIAN-CVE-2016-0701
The DHcheckpubkey function in crypto/dh/dhcheck.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman DH key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose...
CVE-2016-0701
The DHcheckpubkey function in crypto/dh/dhcheck.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman DH key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose...
CVE-2016-0701
The DHcheckpubkey function in crypto/dh/dhcheck.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman DH key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose...
Exponent 2.3.7 PHP Code Execution
Advisory ID: HTB23290 Product: Exponent Vendor: http://www.exponentcms.org/ Vulnerable Versions: 2.3.7 and probably prior Tested Version: 2.3.7 Advisory Publication: January 13, 2016 without technical details Vendor Notification: January 13, 2016 Vendor Patch: January 23, 2016 Public Disclosure:...
