784 matches found
CVE-2016-8897: Improper Neutralization of Special Elements used in an SQL Command
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php...
CVE-2016-8899: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to changecats...
OIC Exponent CMS SQL Injection Vulnerability (CNVD-2019-16532)
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in the...
PT-2019-7849
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue is related to an Object Injection vulnerability in the expCatController.php file, specifically in the change cats function of the core controllers module in the framework. Recommendations For...
Exponent CMS Object Injection Vulnerability
OIC Exponent CMS is a free, open source, modular PHP-based content management system CMS from OIC USA. A security vulnerability exists in the framework/modules/core/controllers/expCatController.php file in Exponent CMS version 2.3.9. No details of the vulnerability are provided at this time...
PT-2019-7847
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue is related to a sql injection vulnerability. It is located in the framework/modules/help/controllers/helpController.php file. Recommendations For Exponent CMS version 2.3.9, update to a newer...
Exponent CMS 2.4.1 Patch 5 - Privilege Escalation Vulnerability
Exponent CMS allows rogue admins to elevate their privileges. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
Exponent CMS 2.3.9 Multiple Vulnerabilities
ExponentCMS is prone to multiple vulnerabilities that have their source in the Pixidou Image Editor component. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...
Exponent CMS 2.3 Multiple File Upload Vulnerabilities
Exponent CMS 2.3 is prone to multiple vulnerabilities due to oversights in the file upload functionality. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
Design/Logic Flaw
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
CVE-2016-7443
CVE-2016-7443 affects Exponent CMS, versions 2.3.0 to 2.3.9. The issue is a vulnerable file upload path that could allow a remote attacker to impact the system via uploading files to the wrong location. The vulnerability description is supported by multiple feeds and references, indicating a secu...
CVE-2016-7443
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
OIC Exponent CMS Elevation of Privilege Vulnerability
OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A security vulnerability exis...
CVE-2016-7443: Unrestricted Upload of File with Dangerous Type
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."...
PT-2018-4986
Name of the Vulnerable Software and Affected Versions Exponent CMS versions 2.3.0 through 2.3.9 Description The issue allows remote attackers to have an unspecified impact related to uploading files to the wrong location. Recommendations For Exponent CMS versions 2.3.0 through 2.3.9, update to a...