PT-2016-7683 · Exponent · Exponent Cms

Fyth1 · Published 2016-11-04 · Updated 2016-11-29 · CVE-2016-9183

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0

Description The issue concerns the passing of untrusted input into the selectObjectsBySql method in the orderController.php file of the Exponent CMS. This method, part of the mysqli database class, attempts to prevent SQL injection using the injectProof method. However, this filter can be easily bypassed because it only sanitizes user input if there are odd numbers of ' or " characters. The impact of this issue is Information Disclosure.

Recommendations For Exponent CMS version 2.4.0, consider disabling the selectObjectsBySql method in the orderController.php file until a proper fix is available, or ensure that all input to this method is thoroughly validated and sanitized to prevent SQL injection attacks.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-9183

Affected Products

Exponent Cms

References · 5

• https://github.com/exponentcms/exponent-cms/commit/3b3557e9f6ba193a4c23c8ce5498fa285dddf3f3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-9183 · Security Note
• https://osv.dev/vulnerability/CVE-2016-9183 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9183 · Note
• http://securityfocus.com/bid/94227 · Note