PT-2016-7721

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read database information. This is related to a "sef URL" issue in the address/addContentToSearch/id/ endpoint. Recommendations For Exponent CMS version 2.4.0, update ...

CVE-2016-9285: Exposure of Sensitive Information to an Unauthorized Actor

framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id number, as demonstrated by address/edit/id/1, related to an "addresses, countries, and regions" issue...

CVE-2016-9283: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

PT-2016-7720

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read database information. This is achieved by exploiting the search string parameter in the "action=search&module=search" API endpoint. Recommendations For Exponent C...

Exponent CMS 2.4.0 Blind SQL Injection Vulnerability

Exponent CMS version 2.4.0 suffers from a remote blind SQL injection vulnerability...

PT-2016-7724

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0patch1 Description The issue allows remote attackers to read address information due to improper access restriction to user records. This can be demonstrated by accessing the "address/show/id/1" URI. Recommendations F...

PT-2016-7723

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read user information by modifying the id number. This is related to an issue with "addresses, countries, and regions". An example of exploitation is via the endpoint...

PT-2016-7726

Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.4.0 and earlier Description The issue concerns a SQL injection problem. Specifically, the target parameter of the DragnDropReRank function in the navigationController.php file is used directly without filtration, allowi...

CVE-2016-9286: Exposure of Sensitive Information to an Unauthorized Actor

framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI...

CVE-2016-9288: Improper Neutralization of Special Elements used in an SQL Command

In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without any filtration which caused SQL injection. The payload can be used like this: /navigation/DragnDropReRank/target/1...

CVE-2016-9272: Improper Neutralization of Special Elements used in an SQL Command

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...

CVE-2016-9282: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the searchstring parameter...

PT-2016-7717

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.4.1 Description A Blind SQL Injection issue can lead to site database information disclosure and denial of service. The issue is related to the rerank array parameter. Recommendations For versions prior to 2.4....

PT-2016-7722

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read user information. This is achieved through the getUsersByJSON endpoint, specifically by appending a string to the "users/getUsersByJSON/sort/" endpoint...

Exponent CMS 2.4.0 Blind SQL Injection

Document Title: =============== Blind SQL Injection Vulnerability in Exponent CMS 2.4.0 References Source: ==================== https://exponentcms.lighthouseapp.com/projects/61783/tickets/1394-blind-sql-injection-vulnerability-in-exponent-cms-240-4...

Exponent CMS SQL Injection Vulnerability (CNVD-2016-10804)

Exponent is a web content management system. Multiple SQL injection vulnerabilities exist in the framework/modules/core/controllers/expRatingController.php/update method in Exponent CMS version 2.4.0, which can be exploited by an authenticated remote user to execute arbitrary SQL commands via the...

CVE-2016-9242

Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 contenttype or 2 subtype parameter...

CVE-2016-9242

Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 contenttype or 2 subtype parameter...

Sql injection

Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 contenttype or 2 subtype parameter...

CVE-2016-9242

Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 contenttype or 2 subtype parameter...