Exponentcms vulnerabilities

Products

• Exponent Cms 59
• Exponent Cms 4

Newest

• exponentcms exponent cms Exponent CMS 2.6 Multiple Vulnerabilities Stored XSS Authentication CVE-2021-47931 5.1 MediumMay 10, 2026
• exponentcms exponent cms SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain... CVE-2021-32441 7.5 HighFebruary 17, 2023
• exponentcms exponent cms Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the... CVE-2022-23049 5.4 MediumFebruary 9, 2022
• exponentcms exponent cms Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in... CVE-2022-23048 7.2 HighFebruary 9, 2022
• exponentcms exponent cms Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code... CVE-2022-23047 4.8 MediumFebruary 9, 2022
• exponentcms A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A... CVE-2021-38751 4.3 MediumAugust 16, 2021
• exponentcms exponent cms Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php. CVE-2016-9023 9.8 CriticalDecember 31, 2020
• exponentcms exponent cms Exponent CMS before 2.6.0 has improper input validation in fileController.php. CVE-2016-9026 9.8 CriticalDecember 31, 2020
• exponentcms exponent cms Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php. CVE-2016-9025 9.8 CriticalDecember 31, 2020
• exponentcms exponent cms Exponent CMS before 2.6.0 has improper input validation in usersController.php. CVE-2016-9022 9.8 CriticalDecember 31, 2020
• exponentcms exponent cms Exponent CMS before 2.6.0 has improper input validation in storeController.php. CVE-2016-9021 9.8 CriticalDecember 31, 2020
• exponentcms exponent cms Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules... CVE-2016-8898 9.8 CriticalMay 24, 2019
• exponentcms exponent cms Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules... CVE-2016-8900 9.8 CriticalMay 24, 2019
• exponentcms exponent cms Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help... CVE-2016-8897 9.8 CriticalMay 23, 2019
• exponentcms exponent cms Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules... CVE-2016-8899 9.8 CriticalMay 23, 2019
• exponentcms exponent cms Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors... CVE-2016-7443 9.8 CriticalMarch 6, 2018
• exponentcms exponent cms In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges. CVE-2017-18213 7.2 HighMarch 4, 2018
• exponentcms exponent cms Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2. CVE-2015-1177 6.1 MediumAugust 28, 2017
• exponentcms exponent cms In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file... CVE-2017-8085 6.1 MediumApril 24, 2017
• exponentcms exponent cms Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey... CVE-2017-7991 9.8 CriticalApril 22, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController... CVE-2016-9087 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent... CVE-2016-9020 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in the activate_address function in framework/modules/addressbook... CVE-2016-9019 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and... CVE-2016-7789 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and... CVE-2016-7788 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php... CVE-2016-7784 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and... CVE-2016-7783 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and... CVE-2016-7782 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent... CVE-2016-7781 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote... CVE-2016-7780 9.8 CriticalMarch 7, 2017
• exponentcms exponent cms install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via... CVE-2016-7565 9.8 CriticalFebruary 13, 2017
• exponentcms exponent cms Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to... CVE-2016-7400 Public exploit 9.8 CriticalFebruary 7, 2017
• exponentcms exponent cms An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be... CVE-2017-5879 9.8 CriticalFebruary 6, 2017
• exponentcms exponent cms Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the... CVE-2016-2242 9.8 CriticalJanuary 23, 2017
• exponentcms exponent cms Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded,... CVE-2015-8684 6.1 MediumJanuary 18, 2017
• exponentcms exponent cms Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3... CVE-2015-8667 6.1 MediumJanuary 18, 2017
• exponentcms exponent cms Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An... CVE-2016-7791 9.8 CriticalJanuary 12, 2017
• exponentcms exponent cms Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An... CVE-2016-7790 9.8 CriticalJanuary 12, 2017
• exponentcms exponent cms In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id... CVE-2016-9481 9.8 CriticalNovember 29, 2016
• exponentcms exponent cms In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1,... CVE-2016-9287 9.8 CriticalNovember 15, 2016
• exponentcms exponent cms In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or... CVE-2016-9288 9.8 CriticalNovember 11, 2016
• exponentcms exponent cms framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not... CVE-2016-9286 5.3 MediumNovember 11, 2016
• exponentcms exponent cms framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows... CVE-2016-9285 5.3 MediumNovember 11, 2016
• exponentcms exponent cms getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0... CVE-2016-9284 5.3 MediumNovember 11, 2016
• exponentcms exponent cms SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote... CVE-2016-9283 7.5 HighNovember 11, 2016
• exponentcms exponent cms SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0... CVE-2016-9282 7.5 HighNovember 11, 2016
• exponentcms exponent cms A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array... CVE-2016-9272 9.1 CriticalNovember 11, 2016
• exponentcms exponent cms Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers... CVE-2016-9242 8.8 HighNovember 7, 2016
• exponentcms exponent cms In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0,... CVE-2016-9184 7.5 HighNovember 4, 2016
• exponentcms exponent cms In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted... CVE-2016-9183 7.5 HighNovember 4, 2016
• Show olderLoading…