OIC Exponent CMS Input Validation Vulnerability

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...

PT-2020-8056

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the cron/find help.php file. This can potentially lead to security issues due to the lack of proper validation of user input...

PT-2017-9337

Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.3.9 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the version parameter in the cron/find help.php file. Recommendations For Exponent CMS versions 2.3.9...