784 matches found
CVE-2016-8898
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
CVE-2016-8900
Exponent CMS 2.3.9 is affected by an Object Injection vulnerability in framework/modules/core/controllers/expTagController.php (change_tags). The issue is documented across multiple sources (NVD, RH, CVE lists, etc.) under CVE-2016-8900. According to the NVD entry, the vulnerability has a base sc...
CVE-2016-8900
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to changetags...
CVE-2016-8900
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to changetags...
CVE-2016-8900: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to changetags...
CVE-2016-8898: Improper Neutralization of Special Elements used in an SQL Command
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...
PT-2019-7850
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue is related to an Object Injection vulnerability in the expTagController.php file, specifically in the change tags function. This vulnerability is located in the framework/modules/core/controller...
PT-2019-7848
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue is related to a sql injection vulnerability. It affects the cartController.php file in the ecommerce module of the framework. Recommendations For Exponent CMS version 2.3.9, update to a newer...
CVE-2016-8897
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
CVE-2016-8899
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to changecats...
Design/Logic Flaw
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to changecats...
Sql injection
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
CVE-2016-8897
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
CVE-2016-8899
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to changecats...
CVE-2016-8897
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
CVE-2016-8897
CVE-2016-8897 affects Exponent CMS version 2.3.9, with a SQL injection vulnerability in framework/modules/help/controllers/helpController.php. The issue is described across multiple feeds (NVD, RH, OSV, CNVD, CVE lists) as a SQL injection in that PHP file, but the provided documents do not specif...
CVE-2016-8897
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
CVE-2016-8899
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to changecats...
CVE-2016-8899
CVE-2016-8899 affects Exponent CMS version 2.3.9 and involves an Object Injection vulnerability in the file framework/modules/core/controllers/expCatController.php, related to change_cats. The available documents identify the affected product and component and confirm the root cause as object inj...