CVE-2016-7453
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.
Affected Platforms (CPE)
📦
Exponentcms
返回 CVE 瀏覽器
相關漏洞威脅
CVE-2006-160410.0
Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables tha...
CVE-2005-376410.0
The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uplo...
CVE-2016-94819.8
In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments...
CVE-2016-70959.8
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in ...