CVE-2021-47931 | Medium | 6.4 | 2026-05-10 | Exponent CMS 2.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the Title and Tex… |
CVE-2021-32441 | High | 7.5 | 2023-02-17 | SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the… |
CVE-2022-23049 | Medium | 5.4 | 2022-02-09 | Exponent CMS 2.6.0patch2 allows an authenticated user to inject persistent JavaScript code on the "User-Agent" header when logging in. When an administrator us… |
CVE-2022-23048 | High | 7.2 | 2022-02-09 | Exponent CMS 2.6.0patch2 allows an authenticated admin user to upload a malicious extension in the format of a ZIP file with a PHP file inside it. After upload… |
CVE-2022-23047 | Medium | 4.8 | 2022-02-09 | Exponent CMS 2.6.0patch2 allows an authenticated admin user to inject persistent JavaScript code inside the "Site/Organization Name","Site Title" and "Site Hea… |
CVE-2021-38751 | Medium | 4.3 | 2021-08-16 | A HTTP Host header attack exists in ExponentCMS 2.6 and below in /exponent_constants.php. A modified HTTP header can change links on the webpage to an arbitrar… |
CVE-2016-9026 | Critical | 9.8 | 2020-12-31 | Exponent CMS before 2.6.0 has improper input validation in fileController.php. |
CVE-2016-9025 | Critical | 9.8 | 2020-12-31 | Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php. |
CVE-2016-9023 | Critical | 9.8 | 2020-12-31 | Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php. |
CVE-2016-9022 | Critical | 9.8 | 2020-12-31 | Exponent CMS before 2.6.0 has improper input validation in usersController.php. |
CVE-2016-9021 | Critical | 9.8 | 2020-12-31 | Exponent CMS before 2.6.0 has improper input validation in storeController.php. |
CVE-2016-8900 | Critical | 9.8 | 2019-05-24 | Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags. |
CVE-2016-8898 | Critical | 9.8 | 2019-05-24 | Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php. |
CVE-2016-8899 | Critical | 9.8 | 2019-05-23 | Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to change_cats. |
CVE-2016-8897 | Critical | 9.8 | 2019-05-23 | Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php. |
CVE-2016-7443 | Critical | 9.8 | 2018-03-07 | Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location." |
CVE-2017-18213 | High | 7.2 | 2018-03-04 | In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges. |
CVE-2015-1177 | Medium | 6.1 | 2017-08-28 | Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2. |
CVE-2017-8085 | Medium | 6.1 | 2017-04-24 | In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php. |
CVE-2017-7991 | Critical | 9.8 | 2017-04-22 | Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/e… |
CVE-2016-9087 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers… |
CVE-2016-9020 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbit… |
CVE-2016-9019 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in the activate_address function in framework/modules/addressbook/controllers/addressController.php in Exponent CMS 2.3.9 and earli… |
CVE-2016-7789 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands… |
CVE-2016-7788 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL comma… |
CVE-2016-7784 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to… |
CVE-2016-7783 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands… |
CVE-2016-7782 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands… |
CVE-2016-7781 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbit… |
CVE-2016-7780 | Critical | 9.8 | 2017-03-07 | SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version p… |
CVE-2016-7565 | Critical | 9.8 | 2017-02-13 | install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter. |
CVE-2016-7400 | Critical | 9.8 | 2017-02-07 | Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an act… |
CVE-2017-5879 | Critical | 9.8 | 2017-02-06 | An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which… |
CVE-2016-2242 | Critical | 9.8 | 2017-01-23 | Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php. |
CVE-2015-8684 | Medium | 6.1 | 2017-01-18 | Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting (XS… |
CVE-2015-8667 | Medium | 6.1 | 2017-01-18 | Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or H… |
CVE-2016-7791 | Critical | 9.8 | 2017-01-12 | Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz' file to the websit… |
CVE-2016-7790 | Critical | 9.8 | 2017-01-12 | Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the website through uploader_… |
CVE-2016-9481 | Critical | 9.8 | 2016-11-29 | In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is… |
CVE-2016-9287 | Critical | 9.8 | 2016-11-15 | In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1, untrusted input is passed into getSearchResults. The method get… |
CVE-2016-9288 | Critical | 9.8 | 2016-11-11 | In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is d… |
CVE-2016-9286 | Medium | 5.3 | 2016-11-11 | framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote att… |
CVE-2016-9285 | Medium | 5.3 | 2016-11-11 | framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id numbe… |
CVE-2016-9284 | Medium | 5.3 | 2016-11-11 | getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via users/get… |
CVE-2016-9283 | High | 7.5 | 2016-11-11 | SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSe… |
CVE-2016-9282 | High | 7.5 | 2016-11-11 | SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via acti… |
CVE-2016-9272 | Critical | 9.1 | 2016-11-11 | A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial… |
CVE-2016-9242 | High | 8.8 | 2016-11-07 | Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote au… |
CVE-2016-9184 | High | 7.5 | 2016-11-04 | In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectO… |
CVE-2016-9183 | High | 7.5 | 2016-11-04 | In /framework/modules/ecommerce/controllers/orderController.php of Exponent CMS 2.4.0, untrusted input is passed into selectObjectsBySql. The method selectObje… |
CVE-2016-9182 | High | 7.5 | 2016-11-04 | Exponent CMS 2.4 uses PHP reflection to call a method of a controller class, and then uses the method name to check user permission. But, the method name in PH… |
CVE-2016-9135 | High | 7.5 | 2016-11-03 | Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impa… |
CVE-2016-9134 | High | 7.5 | 2016-11-03 | Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Disclosure. |
CVE-2016-7453 | Critical | 9.8 | 2016-11-03 | The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection. |
CVE-2016-7452 | High | 7.5 | 2016-11-03 | The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory travers… |
CVE-2016-7095 | Critical | 9.8 | 2016-11-03 | Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one al… |
CVE-2014-8690 | | | 2015-02-19 | Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, and 2.3.x before 2.3.1 patch 4 allow remo… |
CVE-2013-3295 | | | 2014-12-30 | Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to include and execute arbitrary local files vi… |
CVE-2014-6635 | | | 2014-10-26 | Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the src parameter in the sear… |
CVE-2013-3294 | | | 2014-02-11 | Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) sr… |
CVE-2010-5002 | | | 2011-11-01 | Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web scr… |