GCVE - cpe:2.3:a:exponentcms:exponent_cms:2.3.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:exponentcms:exponent_cms:2.3.9:*:*:*:*:*:*:*

part: a version: 2.3.9 update: *

Vendor	Exponentcms (`c93592b0-b2a8-5154-96c1-44a265d7c303`)
Product	Exponent Cms (`864ae04b-7514-5db8-8b8b-80250d02e6c1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-9135`	vulnerable	2026-06-08 05:08:22.687675	Details available Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impact is Information Disclosure. Published: 2016-11-03T10:00:00.000Z Updated: 2024-08-06T02:42:10.545Z Open on db.gcve.eu Reference links https://github.com/exponentcms/exponent-cms/commit/d5c3c175b60bd26b2b74ec85b8f0d2544db2c8db http://www.securityfocus.com/bid/94127	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9134`	vulnerable	2026-06-08 05:08:22.687337	Details available Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Disclosure. Published: 2016-11-03T10:00:00.000Z Updated: 2024-08-06T02:42:10.347Z Open on db.gcve.eu Reference links https://github.com/exponentcms/exponent-cms/commit/d5c3c175b60bd26b2b74ec85b8f0d2544db2c8db http://www.securityfocus.com/bid/94127 https://github.com/exponentcms/exponent-cms/commit/45a7a62797e64e8abbae35d4859097c26f1874b1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8900`	vulnerable	2026-06-08 05:08:22.009165	Details available Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags. Published: 2019-05-24T16:11:37.000Z Updated: 2024-08-06T02:35:02.200Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/09/30/5 https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8899`	vulnerable	2026-06-08 05:08:22.008854	Details available Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to change_cats. Published: 2019-05-23T18:18:53.000Z Updated: 2024-08-06T02:35:02.282Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/09/30/5 https://github.com/exponentcms/exponent-cms/commit/fdafb5ec97838e4edbd685f587f28d3174ebb3db	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8898`	vulnerable	2026-06-08 05:08:22.008536	Details available Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php. Published: 2019-05-24T16:20:41.000Z Updated: 2024-08-06T02:35:02.313Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2016/09/30/5 https://github.com/exponentcms/exponent-cms/commit/99636b2118cd9af4eb9920f6b6c228bd824593d2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8897`	vulnerable	2026-06-08 05:08:22.008133	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7791`	vulnerable	2026-06-08 05:08:13.193891	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7790`	vulnerable	2026-06-08 05:08:13.193571	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-7565`	vulnerable	2026-06-08 05:08:13.068917	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.