Exponentcms » Exponent Cms : Security Vulnerabilities, CVEs, Published In 2017
In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php.
Max CVSS
6.1
EPSS Score
0.14%
Published
2017-04-24
Updated
2017-04-29
Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.
Max CVSS
9.8
EPSS Score
15.24%
Published
2017-04-22
Updated
2020-04-28
An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects source_selector.php and the following parameter: src.
Max CVSS
9.8
EPSS Score
0.18%
Published
2017-02-06
Updated
2017-02-08
SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the fileid parameter.
Max CVSS
9.8
EPSS Score
0.20%
Published
2017-03-07
Updated
2017-04-04
SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
Max CVSS
9.8
EPSS Score
0.20%
Published
2017-03-07
Updated
2017-04-04
SQL injection vulnerability in the activate_address function in framework/modules/addressbook/controllers/addressController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the is_what parameter.
Max CVSS
9.8
EPSS Score
0.20%
Published
2017-03-07
Updated
2017-04-01
Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz' file to the website, then extract it by visiting '/install/index.php?install_sample=../../files/exploit', which leads to arbitrary code execution.
Max CVSS
9.8
EPSS Score
1.21%
Published
2017-01-12
Updated
2017-01-13
Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the website through uploader_paste.php, then overwrite /framework/conf/config.php, which leads to arbitrary code execution.
Max CVSS
9.8
EPSS Score
1.21%
Published
2017-01-12
Updated
2017-01-13
SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter.
Max CVSS
9.8
EPSS Score
0.21%
Published
2017-03-07
Updated
2017-04-01
SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Max CVSS
9.8
EPSS Score
0.16%
Published
2017-03-07
Updated
2017-04-01
SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter.
Max CVSS
9.8
EPSS Score
0.28%
Published
2017-03-07
Updated
2017-07-28
SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
Max CVSS
9.8
EPSS Score
0.16%
Published
2017-03-07
Updated
2017-03-31
SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the src parameter.
Max CVSS
9.8
EPSS Score
0.16%
Published
2017-03-07
Updated
2017-03-31
SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the author parameter.
Max CVSS
9.8
EPSS Score
0.16%
Published
2017-03-07
Updated
2017-03-31
SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
Max CVSS
9.8
EPSS Score
0.16%
Published
2017-03-07
Updated
2017-03-31
install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.
Max CVSS
9.8
EPSS Score
0.64%
Published
2017-02-13
Updated
2018-02-27
Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id parameter in a showComments expComment controller action.
Max CVSS
9.8
EPSS Score
0.52%
Published
2017-02-07
Updated
2018-02-27
Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php.
Max CVSS
10.0
EPSS Score
3.46%
Published
2017-01-23
Updated
2018-10-09
Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly have other unspecified impact as demonstrated by uploading a file with an .html extension, then accessing it via the elFinder functionality.
Max CVSS
6.1
EPSS Score
0.10%
Published
2017-01-18
Updated
2017-01-19
Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email.
Max CVSS
6.1
EPSS Score
0.10%
Published
2017-01-18
Updated
2017-01-19
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.
Max CVSS
6.1
EPSS Score
0.20%
Published
2017-08-28
Updated
2018-10-09
21 vulnerabilities found