PT-2019-19801

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 2.2.10 Description The issue allows an authenticated user to achieve SQL Injection in the class.showtime2 data.php file via several functions, including updateshow, inputshow, Getshowinfo, Getpictureinfo,...

CVE-2017-17602

Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php showid or view-product.php pid parameter...

PT-2017-14898

Name of the Vulnerable Software and Affected Versions Advance B2B Script version 2.1.3 Description The issue is related to SQL Injection, which can be exploited via the show id parameter in the "tradeshow-list-detail.php" endpoint or the pid parameter in the "view-product.php" endpoint...

CVE-2016-9286

framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI...

PT-2016-7724

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0patch1 Description The issue allows remote attackers to read address information due to improper access restriction to user records. This can be demonstrated by accessing the "address/show/id/1" URI. Recommendations F...

CVE-2016-9286: Exposure of Sensitive Information to an Unauthorized Actor

framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI...