Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-7400

EPSS 19.42% · P95
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-7400

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id parameter in a showComments expComment controller action.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
OIC Exponent CMS SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OIC Exponent CMS是美国OIC集团公司的一套基于PHP的免费、开源的模块化内容管理系统（CMS）。该系统支持在页面中直接进行编辑，并提供用户管理、网站配置、内容编辑等功能。 OIC Exponent CMS 2.4.0之前的版本中存在SQL注入漏洞。远程攻击者可利用该漏洞执行任意的SQL命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-7400

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-7400

Please Login to view more intelligence information

Same Patch Batch · n/a · 2017-02-07 · 28 CVEs total

CVE-2016-6667NetApp OnCommand Unified Manager for Clustered Data ONTAP 安全漏洞
CVE-2016-10044Linux kernel 安全漏洞
CVE-2014-9914Linux kernel 竞争条件漏洞
CVE-2016-7164Libtorrent 安全漏洞
CVE-2016-6199Gradle 安全漏洞
CVE-2016-6175php-gettext 代码注入漏洞
CVE-2016-6131GNU Libiberty 安全漏洞
CVE-2016-2781GNU coreutils 安全漏洞
CVE-2016-2779util-linux 安全漏洞
CVE-2016-2539Atutor 跨站请求伪造漏洞
CVE-2016-1504dhcpcd 安全漏洞
CVE-2015-8608Perl 安全漏洞
CVE-2015-5677FreeBSD 安全漏洞
CVE-2016-9639SaltStack Salt 安全漏洞
CVE-2015-7599Wind River VxWorks 数字错误漏洞
CVE-2016-6495NetApp Data ONTAP 安全漏洞
CVE-2016-5711NetApp Virtual Storage Console for VMware vSphere 安全漏洞
CVE-2016-5372NetApp Snap Creator Framework 跨站请求伪造漏洞
CVE-2016-4341NetApp Clustered Data ONTAP 安全漏洞
CVE-2016-3180Tor Browser Launcher 安全漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-7400

No comments yet

Leave a comment