3 matches found
CVE-2016-7565
install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter...
9.8CVSS0.02264EPSS
SaveExploits0References4
PT-2017-9225
Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters in the sc array parameter of the install/index.php file. Recommendations For Exponent CM...
9.8CVSS0.02264EPSS
SaveExploits0References7
CVE-2016-7565: Improper Access Control
install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter...
9.8CVSS6.4AI score0.02264EPSS
SaveExploits0References2
20