SQL Injection

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address addres…CVE-2016-7400Exponentcms · 4.7% likely

   CWE-89

2. SQL injection vulnerability in the activate_address function in framework/modules/addressbook/controllers/addressController.php in Exponent CMS 2.3.9 and earlier allows remote att…CVE-2016-9019Exponentcms · 3.3% likely

   CWE-89

3. SQL injection vulnerability in framework/modules/help/controllers/helpController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands vi…CVE-2016-9020Exponentcms · 3.1% likely

   CWE-89

4. SQL injection vulnerability in framework/modules/users/models/user.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the username…CVE-2016-7788Exponentcms · 2.6% likely

   CWE-89

5. SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQ…CVE-2016-7784Exponentcms · 2.6% likely

   CWE-89

6. SQL injection vulnerability in framework/core/models/expRecord.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the title parame…CVE-2016-7783Exponentcms · 2.6% likely

   CWE-89

7. SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the src paramete…CVE-2016-7782Exponentcms · 2.6% likely

   CWE-89

8. SQL injection vulnerability in framework/modules/blog/controllers/blogController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands vi…CVE-2016-7781Exponentcms · 2.6% likely

   CWE-89

9. SQL injection vulnerability in cron/find_help.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.CVE-2016-7780Exponentcms · 2.6% likely

   CWE-89

10. SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey param…CVE-2016-7789Exponentcms · 2.5% likely

    CWE-89

11. Multiple SQL injection vulnerabilities in Exponent CMS before 2.2.0 release candidate 1 allow remote attackers to execute arbitrary SQL commands via the (1) src or (2) username pa…CVE-2013-3294Exponentcms · 2.4% likely

    CWE-89

12. A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.CVE-2016-9272Exponentcms · 2.2% likely

    CWE-89

13. SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrar…CVE-2016-9087Exponentcms · 2.2% likely

    CWE-89

14. Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.CVE-2017-7991Exponentcms · 2.1% likely

    CWE-89

15. Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/expPaginator.php" affecting the order parameter. Impact is Information Disclosure.CVE-2016-9134Exponentcms · 2.0% likely

    CWE-89

16. An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which can be used to dump…CVE-2017-5879Exponentcms · 1.9% likely

    CWE-89

17. Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php.CVE-2016-8898Exponentcms · 1.8% likely

    CWE-89

18. Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/help/controllers/helpController.php.CVE-2016-8897Exponentcms · 1.8% likely

    CWE-89

19. In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is defined in the expCo…CVE-2016-9481Exponentcms · 1.8% likely

    CWE-89

20. In /framework/modules/core/controllers/expHTMLEditorController.php of Exponent CMS 2.4.0, untrusted input is used to construct a table name, and in the selectObject method in mysq…CVE-2016-9184Exponentcms · 1.8% likely

    CWE-89

21. Exponent CMS 2.3.9 suffers from a SQL injection vulnerability in "/framework/modules/help/controllers/helpController.php" affecting the version parameter. Impact is Information Di…CVE-2016-9135Exponentcms · 1.8% likely

    CWE-89

22. SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trail…CVE-2016-9283Exponentcms · 1.7% likely

    CWE-89

23. SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=sea…CVE-2016-9282Exponentcms · 1.7% likely

    CWE-89

24. In /framework/modules/notfound/controllers/notfoundController.php of Exponent CMS 2.4.0 patch1, untrusted input is passed into getSearchResults. The method getSearchResults is def…CVE-2016-9287Exponentcms · 1.5% likely

    CWE-89

25. The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.CVE-2016-7453Exponentcms · 1.5% likely

    CWE-89

26. In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without…CVE-2016-9288Exponentcms · 1.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.