Exponent CMS < 2.4.0 Multiple SQLi and RCE Vulnerabilities CVE-2016-7400CVE-2016-7565CVE-2016-7780CVE-2016-7781CVE-2016-7782CVE-2016-7783CVE-2016-7784CVE-2016-7788CVE-2016-7789CVE-2016-7790CVE-2016-7791CVE-2016-9019CVE-2016-9020CVE-2016-9087

Name: Exponent CMS < 2.4.0 Multiple SQLi and RCE Vulnerabilities (CVE-2016-7400, CVE-2016-7565, CVE-2016-7780, CVE-2016-7781, CVE-2016-7782, CVE-2016-7783, CVE-2016-7784, CVE-2016-7788, CVE-2016-7789, CVE-2016-7790, CVE-2016-7791, CVE-2016-9019, CVE-2016-9020, CVE-2016-9087)
Published: 2018-01-02T00:00:00.000Z

Severity

Vulnerability description: Not available
Risk description: Not available
Recommendation: Not available
References: http://seclists.org/fulldisclosure/2016/Nov/12 http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html http://www.exponentcms.org/news/version-2-4-0-released
Codename: Not available

Detectable with: Network Scanner
Scan engine: OpenVAS
Exploitable with Sniper: No
CVE Published: Not available
Detection added at: Jan 2, 2018
Software Type: Not available
Vendor: Not available
Product: Not available

Detect this vulnerability now!

Check your clients' targets (or your own) for this vulnerability and thousands more! Get proof for validation with our ethical hacking toolkit.

Compare paid plans Free access