PT-2016-7683 · Exponent · Exponent Cms

Fyth1 · Publicado 2016-11-04 · Atualizado 2016-11-29 · CVE-2016-9183

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0

Description The issue concerns the passing of untrusted input into the selectObjectsBySql method in the orderController.php file of the Exponent CMS. This method, part of the mysqli database class, attempts to prevent SQL injection using the injectProof method. However, this filter can be easily bypassed because it only sanitizes user input if there are odd numbers of ' or " characters. The impact of this issue is Information Disclosure.

Recommendations For Exponent CMS version 2.4.0, consider disabling the selectObjectsBySql method in the orderController.php file until a proper fix is available, or ensure that all input to this method is thoroughly validated and sanitized to prevent SQL injection attacks.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-9183

Produtos afetados

Exponent Cms

Referências · 5

• https://github.com/exponentcms/exponent-cms/commit/3b3557e9f6ba193a4c23c8ce5498fa285dddf3f3 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2016-9183 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-9183 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9183 · Nota
• http://securityfocus.com/bid/94227 · Nota