Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
exponentcms exponent cms vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2016-9135
Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impact is Information Disclosure.
Exponentcms Exponent Cms 2.3.9
7.5
CVSSv3
CVE-2016-7452
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.
Exponentcms Exponent Cms
9.8
CVSSv3
CVE-2016-7453
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.
Exponentcms Exponent Cms
9.8
CVSSv3
CVE-2016-7095
Exponent CMS prior to 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution.
Exponentcms Exponent Cms
NA
CVE-2014-8690
Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS prior to 2.1.4 patch 6, 2.2.x prior to 2.2.3 patch 9, and 2.3.x prior to 2.3.1 patch 4 allow remote malicious users to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) src parameter in a none ac...
Exponentcms Exponent Cms 2.2.3
Exponentcms Exponent Cms 2.2.0
Exponentcms Exponent Cms 2.3.1
Exponentcms Exponent Cms
Exponentcms Exponent Cms 2.2.1
Exponentcms Exponent Cms 2.2.2
Exponentcms Exponent Cms 2.3.0
1 EDB exploit
NA
CVE-2013-3295
Directory traversal vulnerability in install/popup.php in Exponent CMS prior to 2.2.0 RC1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
Exponentcms Exponent Cms
NA
CVE-2014-6635
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote malicious users to inject arbitrary web script or HTML via the src parameter in the search action to index.php.
Exponentcms Exponent Cms 2.3.0
NA
CVE-2013-3294
Multiple SQL injection vulnerabilities in Exponent CMS prior to 2.2.0 release candidate 1 allow remote malicious users to execute arbitrary SQL commands via the (1) src or (2) username parameter to index.php.
Exponentcms Exponent Cms 2.0.8
Exponentcms Exponent Cms 2.0.0
Exponentcms Exponent Cms 2.1.3
Exponentcms Exponent Cms 2.0.6
Exponentcms Exponent Cms 0.98.0
Exponentcms Exponent Cms 2.1.1
Exponentcms Exponent Cms 2.0.3
Exponentcms Exponent Cms 2.0.5
Exponentcms Exponent Cms
Exponentcms Exponent Cms 2.0.9
Exponentcms Exponent Cms 2.1.0
Exponentcms Exponent Cms 2.1.2
Exponentcms Exponent Cms 2.0.4
Exponentcms Exponent Cms 2.1.4
Exponentcms Exponent Cms 0.99.0
Exponentcms Exponent Cms 2.0.7
Exponentcms Exponent Cms 2.0.1
Exponentcms Exponent Cms 2.0.2
Exponentcms Exponent Cms 0.97.0
1 EDB exploit
NA
CVE-2010-5002
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote malicious users to inject arbitrary web script or HTML via the u parameter.
Exponentcms Exponent Cms 0.97.0
1 EDB exploit
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflow
type confusion
server-side request forgery
CVE-2024-38440
CVE-2024-27801
CVE-2024-5868
CVE-2024-0582
CVE-2024-37643
CVE-2024-3105
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6