← Back

CVE-2016-2242

nvd nist
Published: Jan 23, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php.

Affected (42)

1 product
Exponent Cms
Configuration A
42 vulnerable
Vulnerable SoftwareAffected Versions
Exponentcms
Version 2.0.0
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.4 p3
Version 2.0.5
Version 2.0.5 p1
Version 2.0.6
Version 2.0.6 p2
Version 2.0.7
Version 2.0.8
Version 2.0.8 p2
Version 2.0.9
Version 2.0.9 p5
Version 2.1.0 alpha
Version 2.1.1
Version 2.1.2
Version 2.1.3
Version 2.1.4
Version 2.1.4 p11
Version 2.2.0
Version 2.2.0 p5
Version 2.2.1
Version 2.2.2
Version 2.2.2 p2
Version 2.2.3
Version 2.2.3 p14
Version 2.3.0
Version 2.3.0 p4
Version 2.3.1
Version 2.3.1 p4
Version 2.3.2
Version 2.3.2 p2
Version 2.3.3
Version 2.3.3 p1
Version 2.3.4
Version 2.3.4 p1
Version 2.3.5
Version 2.3.5 p2
Version 2.3.7
Version 2.3.8

References (10)

Source: cve@mitre.org
Release NotesVendor Advisory
Source: cve@mitre.org
ExploitPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitMitigationPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchThird Party Advisory

Timeline

No history available yet.