CVE-2026-0831: Incorrect Authorization

The Templately plugin for WordPress is vulnerable to Arbitrary File Write in all versions up to, and including, 3.4.8. This is due to inadequate input validation in the savetemplatetofile function where user-controlled parameters like sessionid, contentid, and aipageids are used to construct file...

EUVD-2016-10287

Malware in sbrugna...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11771)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A security vulnerability exis...

CVE-2016-9481

In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, contentid input is passed into showComments. The method showComments is defined in the expCommentControllercontroller with the parameter '$this-params'contentid'' used directly in SQL. Impact is a SQL injection...

CVE-2016-9481: Improper Neutralization of Special Elements used in an SQL Command

In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, contentid input is passed into showComments. The method showComments is defined in the expCommentControllercontroller with the parameter '$this-params'contentid'' used directly in SQL. Impact is a SQL injection...

SmallBiz eShop - content_id SQL Injection

SmallBiz eShop - contentid SQL Injection Powered by SmallBiz eShop CMS Remote Sql Ä°nj. Vuln. Founder: Stack-Terrorist v40 Moroc00 Hacker HomePage: http://www.v4-team.com Greatz : To all Hackerz from Moroc00 & All My Friends . . . Contact: [email protected] Exploit :...