Test ID:	1.3.6.1.4.1.25623.1.0.108093
Category:	Web application abuses
Title:	Exponent CMS < 2.4.0 Multiple SQLi and RCE Vulnerabilities
Summary:	Exponent CMS is prone to multiple SQL injection (SQLi) and; remote code execution (RCE) vulnerabilities.
Description:	Summary: Exponent CMS is prone to multiple SQL injection (SQLi) and remote code execution (RCE) vulnerabilities. Vulnerability Impact: Successful exploitation will allow remote attackers to e.g dump database data out to a malicious server or execute code via the /install/index.php setup tool. Affected Software/OS: Exponent CMS 2.3.9 and earlier. Solution: Upgrade to version 2.4.0 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-7400 BugTraq ID: 93041 http://www.securityfocus.com/bid/93041 https://www.exploit-db.com/exploits/40412/ http://www.openwall.com/lists/oss-security/2016/09/18/2 http://www.openwall.com/lists/oss-security/2016/09/18/10 Common Vulnerability Exposure (CVE) ID: CVE-2016-7565 http://www.openwall.com/lists/oss-security/2016/09/22/6 Common Vulnerability Exposure (CVE) ID: CVE-2016-7780 BugTraq ID: 97208 http://www.securityfocus.com/bid/97208 http://seclists.org/fulldisclosure/2016/Nov/12 http://packetstormsecurity.com/files/139484/Exponent-CMS-2.3.9-SQL-Injection.html Common Vulnerability Exposure (CVE) ID: CVE-2016-7781 BugTraq ID: 97206 http://www.securityfocus.com/bid/97206 Common Vulnerability Exposure (CVE) ID: CVE-2016-7782 BugTraq ID: 97210 http://www.securityfocus.com/bid/97210 Common Vulnerability Exposure (CVE) ID: CVE-2016-7783 BugTraq ID: 97212 http://www.securityfocus.com/bid/97212 Common Vulnerability Exposure (CVE) ID: CVE-2016-7784 BugTraq ID: 97232 http://www.securityfocus.com/bid/97232 http://www.securitytracker.com/id/1037252 Common Vulnerability Exposure (CVE) ID: CVE-2016-7788 BugTraq ID: 97233 http://www.securityfocus.com/bid/97233 Common Vulnerability Exposure (CVE) ID: CVE-2016-7789 BugTraq ID: 97235 http://www.securityfocus.com/bid/97235 http://forums.exponentcms.org/index.php?p=/discussion/comment/1591#Comment_1591 Common Vulnerability Exposure (CVE) ID: CVE-2016-7790 BugTraq ID: 93119 http://www.securityfocus.com/bid/93119 Common Vulnerability Exposure (CVE) ID: CVE-2016-7791 http://www.openwall.com/lists/oss-security/2016/09/29/11 Common Vulnerability Exposure (CVE) ID: CVE-2016-9019 BugTraq ID: 97240 http://www.securityfocus.com/bid/97240 Common Vulnerability Exposure (CVE) ID: CVE-2016-9020 BugTraq ID: 97269 http://www.securityfocus.com/bid/97269 Common Vulnerability Exposure (CVE) ID: CVE-2016-9087 BugTraq ID: 97271 http://www.securityfocus.com/bid/97271
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.