779 matches found
CVE-2016-9184
CVE-2016-9184 involves Exponent CMS 2.4.0. The issue occurs in /framework/modules/core/controllers/expHTMLEditorController.php where untrusted input is used to construct a table name, and in the mysqli-based selectObject method, table names are wrapped with a character not filtered by common tool...
CVE-2016-9184
In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectObject method in mysqli class, table names are wrapped with a character that common filters do not filter, allowing for SQL Injection. Impa...
CVE-2016-9183
The CVE-2016-9183 entry concerns Exponent CMS 2.4.0, where /framework/modules/ecommerce/controllers/orderController.php passes untrusted input to selectObjectsBySql in the mysqli_database class. The injectProof filter intended to prevent SQL injection can be bypassed, depending on the presence of...
CVE-2016-9182
Exponent CMS 2.4 is vulnerable to a permission-bypass flaw in its controller dispatch: PHP reflection treats method names as case-insensitive and undefined actions may run by default. An attacker can use a capitalized method name (e.g., action=Preview) to bypass checks that would deny access with...
CVE-2016-9182
Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check user permission. But, the method name in PHP reflection is case insensitive, and Exponent CMS permits undefined actions to execute by default, so an attacker can use a capitalized...
Exponent CMS 'src' Parameter SQL Injection Vulnerability
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...
Exponent CMS 'getSection' Function SQL Injection Vulnerability
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in th...
Exponent CMS 'username' Parameter SQL Injection Vulnerability
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS...
Exponent CMS SQL Injection Vulnerability (CNVD-2016-10699)
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in th...
OIC Exponent CMS SQL Injection Vulnerability
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...
CVE-2016-9183: Exposure of Sensitive Information to an Unauthorized Actor
In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted input is passed into selectObjectsBySql. The method selectObjectsBySql of class mysqlidatabase uses the injectProof method to prevent SQL injection, but this filter can be bypassed easily: it only...
CVE-2016-9182: Improper Access Control
Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check user permission. But, the method name in PHP reflection is case insensitive, and Exponent CMS permits undefined actions to execute by default, so an attacker can use a capitalized...
PT-2016-7684
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows for SQL Injection due to the use of untrusted input in constructing a table name in the expHTMLEditorController.php file. This is further exploited by the selectObject method in the mysql...
CVE-2016-9184: Improper Neutralization of Special Elements used in an SQL Command
In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectObject method in mysqli class, table names are wrapped with a character that common filters do not filter, allowing for SQL Injection. Impa...
PT-2016-7682
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4 Description The issue arises from the use of PHP reflection in Exponent CMS to call a method of a controller class, which is case insensitive. This, combined with the default permission to execute undefined actions,...
Exponent CMS 'fileid' Parameter SQL Injection Vulnerability
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...
PT-2016-7683
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue concerns the passing of untrusted input into the selectObjectsBySql method in the orderController.php file of the Exponent CMS. This method, part of the mysqli database class, attempts to preven...
Exponent CMS 'author' Parameter SQL Injection Vulnerability
Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...
