Skip to content

CVE-2016-7453 The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.

CriticalCVSS 9.8 EPSS 1.5%
Published
Updated
Exploit status
No public exploit known

Description

The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.

Affected products

ProductAffected versionsFixed in
exponentcms exponent cms <= 2.3.9 No fix listed

References

  • 93045 third-party-advisory vdb-entry
  • github.com issue-tracking patch third-party-advisory