Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (56 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2014-6635 1 Exponentcms 1 Exponent Cms 2025-04-12 N/A
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the src parameter in the search action to index.php.
CVE-2014-8690 1 Exponentcms 1 Exponent Cms 2025-04-12 N/A
Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS before 2.1.4 patch 6, 2.2.x before 2.2.3 patch 9, and 2.3.x before 2.3.1 patch 4 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) src parameter in a none action to index.php, or the (3) "First Name" or (4) "Last Name" field to users/edituser.
CVE-2013-3294 1 Exponentcms 1 Exponent Cms 2025-04-11 N/A
Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) src or (2) username parameter to index.php.
CVE-2010-5002 1 Exponentcms 1 Exponent Cms 2025-04-11 N/A
Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.
CVE-2021-32441 1 Exponentcms 1 Exponent Cms 2025-03-19 7.5 High
SQL Injection vulnerability in Exponent-CMS v.2.6.0 fixed in 2.7.0 allows attackers to gain access to sensitive information via the selectValue function in the expConfig class.
CVE-2017-18213 1 Exponentcms 1 Exponent Cms 2024-11-21 N/A
In Exponent CMS before 2.4.1 Patch #6, certain admin users can elevate their privileges.
CVE-2016-9026 1 Exponentcms 1 Exponent Cms 2024-11-21 9.8 Critical
Exponent CMS before 2.6.0 has improper input validation in fileController.php.
CVE-2016-9025 1 Exponentcms 1 Exponent Cms 2024-11-21 9.8 Critical
Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php.
CVE-2016-9023 1 Exponentcms 1 Exponent Cms 2024-11-21 9.8 Critical
Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php.
CVE-2016-9022 1 Exponentcms 1 Exponent Cms 2024-11-21 9.8 Critical
Exponent CMS before 2.6.0 has improper input validation in usersController.php.
CVE-2016-9021 1 Exponentcms 1 Exponent Cms 2024-11-21 9.8 Critical
Exponent CMS before 2.6.0 has improper input validation in storeController.php.
CVE-2016-8900 1 Exponentcms 1 Exponent Cms 2024-11-21 N/A
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expTagController.php related to change_tags.
CVE-2016-8899 1 Exponentcms 1 Exponent Cms 2024-11-21 N/A
Exponent CMS version 2.3.9 suffers from a Object Injection vulnerability in framework/modules/core/controllers/expCatController.php related to change_cats.
CVE-2016-8898 1 Exponentcms 1 Exponent Cms 2024-11-21 N/A
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php.
CVE-2016-8897 1 Exponentcms 1 Exponent Cms 2024-11-21 N/A
Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php.
CVE-2016-7443 1 Exponentcms 1 Exponent Cms 2024-11-21 N/A
Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."