CVE-2016-7400

Опубликовано: 07 фев. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id parameter in a showComments expComment controller action.

Ссылки

http://www.openwall.com/lists/oss-security/2016/09/18/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/18/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/93041
Third Party Advisory
VDB Entry
https://exponentcms.lighthouseapp.com/projects/61783/changesets/e916702a91a6342bbab483a2be2ba2f11dca3aa3
Patch
Vendor Advisory
https://github.com/exponentcms/exponent-cms/commit/e916702a91a6342bbab483a2be2ba2f11dca3aa3
Issue Tracking
Patch
Third Party Advisory
https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
https://www.exploit-db.com/exploits/40412/
http://www.openwall.com/lists/oss-security/2016/09/18/10
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/18/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/93041
Third Party Advisory
VDB Entry
https://exponentcms.lighthouseapp.com/projects/61783/changesets/e916702a91a6342bbab483a2be2ba2f11dca3aa3
Patch
Vendor Advisory
https://github.com/exponentcms/exponent-cms/commit/e916702a91a6342bbab483a2be2ba2f11dca3aa3
Issue Tracking
Patch
Third Party Advisory
https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
https://www.exploit-db.com/exploits/40412/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exponentcms:exponent_cms:*:*:*:*:*:*:*:*

Версия до 2.3.9 (включая)

EPSS

Процентиль: 95%

0.16527

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-6mq7-238w-j3cr