CVE-2016-7443

    Dashboard / Vulnerabilities / CVE-2016-7443

    CVE-2016-7443

    Published: 7 Mar 2018Last Modified: 8 Jul 2026

    Summary:

    Details: Exponent CMS 2.3.0 through 2.3.9 allows remote attackers to have unspecified impact via vectors related to "uploading files to wrong location."

    References: https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0, http://www.exponentcms.org/news/patch-1-released-for-v2-3-9

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- a86aee920364338bb3e9c72814bdb8abd61390e6
    Fixed -None

    Affected versions

    v2.3.9patch1
    v2.3.9
    v2.3.8patch6
    v2.3.8patch5
    v2.3.8patch4
    v2.3.8patch3
    v2.3.8patch2
    v2.3.8patch1
    v2.3.8
    v2.3.7patch4
    v2.3.7patch3
    v2.3.7patch2
    v2.3.7patch1
    v2.3.7
    v2.3.6
    v2.3.5patch2
    v2.3.5patch1
    v2.3.5
    v2.3.4patch1
    v2.3.4
    v2.3.3patch1
    v2.3.3
    v2.3.2patch2
    v2.3.2patch1
    v2.3.2
    v2.3.1patch4
    v2.3.1
    v2.3.0patch4
    v2.3.0patch3
    v2.3.0patch2
    v2.3.0patch1
    v2.3.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High