Felixk3Y

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the storeController.php file. This could potentially lead to exploitation, although specific details about the nature of the exploitation or affected devices are not provided. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the storeController.php file until the update can be applied.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the fileController.php file. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the purchaseOrderController.php file. This can potentially lead to exploitation. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the cron/find help.php file. This can potentially lead to security issues due to the lack of proper validation of user input. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the cron/find help.php file until a patch is applied.

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.6.0 Description: The issue is related to improper input validation in the usersController.php file. This can potentially lead to security issues, although specific details about exploitation or affected devices are not provided. Recommendations: For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the usersController.php file until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Exponent CMS versions 2.3.9 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `version` parameter in the cron/find help.php file. **Recommendations** For Exponent CMS versions 2.3.9 and earlier, update to a version later than 2.3.9 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Exponent CMS version 2.3.9 **Description** The issue allows for remote code execution. An attacker can upload a malicious file, `exploit.tar.gz`, to the website and then extract it by visiting the "/install/index.php" endpoint with a specific query parameter, `install sample=../../files/exploit`, leading to arbitrary code execution. **Recommendations** For Exponent CMS version 2.3.9, as a temporary workaround, consider restricting access to the "/install/index.php" endpoint and avoid using the `install sample` parameter until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SPIP versions 3.1.x **Description** The issue concerns a Reflected Cross Site Scripting problem. It involves the `/ecrire/exec/info plugin.php` endpoint, specifically the `$plugin` parameter. An example of exploitation is through a `/ecrire/?exec=info plugin` URL. **Recommendations** For SPIP version 3.1.x, as a temporary workaround, consider restricting access to the `/ecrire/exec/info plugin.php` endpoint until a patch is available. Avoid using the `$plugin` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SPIP version 3.1.x **Description** The issue is related to a Reflected Cross Site Scripting problem. It affects the `/ecrire/exec/puce statut.php` endpoint, specifically involving the `id` parameter. An example of exploitation is through a `/ecrire/?exec=puce statut` URL. **Recommendations** For SPIP version 3.1.x, as a temporary workaround, consider restricting access to the `/ecrire/exec/puce statut.php` endpoint until a patch is available. Avoid using the `id` parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Exponent CMS version 2.3.9 **Description** The issue affects the "/expPaginator.php" endpoint, specifically the `order` parameter, allowing for SQL injection. This can lead to information disclosure. **Recommendations** For Exponent CMS version 2.3.9, consider restricting access to the "/expPaginator.php" endpoint until a patch is available, and avoid using the `order` parameter in this endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Exponent CMS version 2.3.9 **Description** The issue affects the "/framework/modules/help/controllers/helpController.php" file, specifically the `version` parameter, allowing for SQL injection. This can lead to information disclosure. **Recommendations** For Exponent CMS version 2.3.9, consider restricting access to the "/framework/modules/help/controllers/helpController.php" file until a patch is available. As a temporary workaround, avoid using the `version` parameter in the affected controller to minimize the risk of exploitation.