Felixk3Y

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the storeController.php file. This could potentially lead to exploitation, although specific details about the nature of the exploitation or affected devices are not provided. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the storeController.php file until the update can be applied.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the fileController.php file. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the purchaseOrderController.php file. This can potentially lead to exploitation. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the cron/find help.php file. This can potentially lead to security issues due to the lack of proper validation of user input. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the cron/find help.php file until a patch is applied.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the usersController.php file. This can potentially lead to security issues, although specific details about exploitation or affected devices are not provided. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the usersController.php file until a patch is applied.

The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `version` parameter in the cron/find help.php file.

The issue allows for remote code execution. An attacker can upload a malicious file, `exploit.tar.gz`, to the website and then extract it by visiting the "/install/index.php" endpoint with a specific query parameter, `install sample=../../files/exploit`, leading to arbitrary code execution.

The issue concerns a Reflected Cross Site Scripting problem. It involves the `/ecrire/exec/info plugin.php` endpoint, specifically the `$plugin` parameter. An example of exploitation is through a `/ecrire/?exec=info plugin` URL.

The issue is related to a Reflected Cross Site Scripting problem. It affects the `/ecrire/exec/puce statut.php` endpoint, specifically involving the `id` parameter. An example of exploitation is through a `/ecrire/?exec=puce statut` URL.

The issue affects the "/expPaginator.php" endpoint, specifically the `order` parameter, allowing for SQL injection. This can lead to information disclosure.

The issue affects the "/framework/modules/help/controllers/helpController.php" file, specifically the `version` parameter, allowing for SQL injection. This can lead to information disclosure.