Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
exponentcms exponent cms 2.3.0 vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2014-8690
Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS prior to 2.1.4 patch 6, 2.2.x prior to 2.2.3 patch 9, and 2.3.x prior to 2.3.1 patch 4 allow remote malicious users to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) src parameter in a none ac...
Exponentcms Exponent Cms
Exponentcms Exponent Cms 2.2.0
Exponentcms Exponent Cms 2.2.1
Exponentcms Exponent Cms 2.2.2
Exponentcms Exponent Cms 2.3.1
Exponentcms Exponent Cms 2.2.3
Exponentcms Exponent Cms 2.3.0
1 EDB exploit
10
CVSSv2
CVE-2016-2242
Exponent CMS 2.x prior to 2.3.7 Patch 3 allows remote malicious users to execute arbitrary code via the sc parameter to install/index.php.
Exponentcms Exponent Cms 2.3.5
Exponentcms Exponent Cms 2.3.1
Exponentcms Exponent Cms 2.2.1
Exponentcms Exponent Cms 2.2.0
Exponentcms Exponent Cms 2.0.9
Exponentcms Exponent Cms 2.0.5
Exponentcms Exponent Cms 2.0.4
Exponentcms Exponent Cms 2.3.3
Exponentcms Exponent Cms 2.2.3
Exponentcms Exponent Cms 2.1.3
Exponentcms Exponent Cms 2.1.2
Exponentcms Exponent Cms 2.0.7
Exponentcms Exponent Cms 2.0.6
Exponentcms Exponent Cms 2.0.2
Exponentcms Exponent Cms 2.0.1
Exponentcms Exponent Cms 2.3.7
Exponentcms Exponent Cms 2.3.2
Exponentcms Exponent Cms 2.2.2
Exponentcms Exponent Cms 2.1.1
Exponentcms Exponent Cms 2.1.0
Exponentcms Exponent Cms 2.0.0
Exponentcms Exponent Cms 2.3.8
4.3
CVSSv2
CVE-2014-6635
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote malicious users to inject arbitrary web script or HTML via the src parameter in the search action to index.php.
Exponentcms Exponent Cms 2.3.0
7.5
CVSSv2
CVE-2016-7443
Exponent CMS 2.3.0 up to and including 2.3.9 allows remote malicious users to have unspecified impact via vectors related to "uploading files to wrong location."
Exponentcms Exponent Cms
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started