784 matches found
CVE-2016-9023: Improper Input Validation
Exponent CMS before 2.6.0 has improper input validation in cron/findhelp.php...
OIC Exponent CMS 输入验证错误漏洞
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...
OIC Exponent CMS 输入验证错误漏洞
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...
PT-2020-8055
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the usersController.php file. This can potentially lead to security issues, although specific details about exploitation or affected device...
PT-2020-8054
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the storeController.php file. This could potentially lead to exploitation, although specific details about the nature of the exploitation o...
CVE-2016-9021: Improper Input Validation
Exponent CMS before 2.6.0 has improper input validation in storeController.php...
OIC Exponent CMS 输入验证错误漏洞
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...
PT-2020-8056
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the cron/find help.php file. This can potentially lead to security issues due to the lack of proper validation of user input...
CVE-2016-9025: Improper Input Validation
Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php...
PT-2020-8058
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the fileController.php file. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue...
PT-2020-8057
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the purchaseOrderController.php file. This can potentially lead to exploitation. Recommendations: For versions prior to 2.6.0, update to...
OIC Exponent CMS SQL Injection Vulnerability (CNVD-2019-16421)
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in the...
CVE-2016-8900
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to changetags...
CVE-2016-8898
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
CVE-2016-8898
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
Sql injection
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
CVE-2016-8900
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to changetags...
Design/Logic Flaw
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to changetags...
CVE-2016-8898
Summary: CVE-2016-8898 affects Exponent CMS 2.3.9, with a SQL injection vulnerability in framework/modules/ecommerce/controllers/cartController.php. The issue is a database-level injection vulnerability in that cart controller path. The NVD entry lists a high/critical impact profile (CVSS v2: HIG...
