10
CVSSv2

CVE-2016-2242

Published: 23/01/2017 Updated: 09/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Exponent CMS 2.x prior to 2.3.7 Patch 3 allows remote malicious users to execute arbitrary code via the sc parameter to install/index.php.

Vulnerable Product Search on Vulmon Subscribe to Product

exponentcms exponent cms 2.3.5

exponentcms exponent cms 2.3.1

exponentcms exponent cms 2.2.1

exponentcms exponent cms 2.2.0

exponentcms exponent cms 2.0.9

exponentcms exponent cms 2.0.5

exponentcms exponent cms 2.0.4

exponentcms exponent cms 2.3.3

exponentcms exponent cms 2.2.3

exponentcms exponent cms 2.1.3

exponentcms exponent cms 2.1.2

exponentcms exponent cms 2.0.7

exponentcms exponent cms 2.0.6

exponentcms exponent cms 2.0.2

exponentcms exponent cms 2.0.1

exponentcms exponent cms 2.3.7

exponentcms exponent cms 2.3.2

exponentcms exponent cms 2.2.2

exponentcms exponent cms 2.1.1

exponentcms exponent cms 2.1.0

exponentcms exponent cms 2.0.0

exponentcms exponent cms 2.3.8

exponentcms exponent cms 2.3.4

exponentcms exponent cms 2.3.0

exponentcms exponent cms 2.1.4

exponentcms exponent cms 2.0.8

exponentcms exponent cms 2.0.3

Exploits

Exponent version 237 suffers from a remote code execution vulnerability ...