Input Validation and Logic

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz' file to the website, then extract it b…CVE-2016-7791Exponentcms · 3.9% likely

   CWE-20

2. Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the website through uploader_paste.php, then over…CVE-2016-7790Exponentcms · 3.9% likely

   CWE-20

3. Exponent CMS before 2.6.0 has improper input validation in fileController.php.CVE-2016-9026Exponentcms · 1.3% likely

   CWE-20

4. Exponent CMS before 2.6.0 has improper input validation in usersController.php.CVE-2016-9022Exponentcms · 1.3% likely

   CWE-20

5. Exponent CMS before 2.6.0 has improper input validation in storeController.php.CVE-2016-9021Exponentcms · 1.3% likely

   CWE-20

6. Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php.CVE-2016-9025Exponentcms · 1.3% likely

   CWE-20

7. Exponent CMS before 2.6.0 has improper input validation in cron/find_help.php.CVE-2016-9023Exponentcms · 1.3% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.