CVE-2016-7452 | BDVDB-2026-79131 Detail

Description#

The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
http://www.securityfocus.com/bid/93045
https://github.com/exponentcms/exponent-cms/commit/c1092f167cc6c78dc8bf9bf149946c5219413df3

Exploit#

No public exploit known

History#

Version 12016-11-03Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.