CVE-2016-7400

Multiple SQL injection vulnerabilities in Exponent CMS before 2.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an activate_address address controller action, (2) title parameter in a show blog controller action, or (3) content_id parameter in a showComments expComment controller action.

• CWE-89

• http://www.openwall.com/lists/oss-security/2016/09/18/10Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/18/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93041Third Party Advisory, VDB Entry
• https://exponentcms.lighthouseapp.com/projects/61783/changesets/e916702a91a6342bbab483a2be2ba2f11dca3aa3Patch, Vendor Advisory
• https://github.com/exponentcms/exponent-cms/commit/e916702a91a6342bbab483a2be2ba2f11dca3aa3Issue Tracking, Patch, Third Party Advisory
• https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
• https://www.exploit-db.com/exploits/40412/
• http://www.openwall.com/lists/oss-security/2016/09/18/10Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/18/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/93041Third Party Advisory, VDB Entry
• https://exponentcms.lighthouseapp.com/projects/61783/changesets/e916702a91a6342bbab483a2be2ba2f11dca3aa3Patch, Vendor Advisory
• https://github.com/exponentcms/exponent-cms/commit/e916702a91a6342bbab483a2be2ba2f11dca3aa3Issue Tracking, Patch, Third Party Advisory
• https://github.com/exponentcms/exponent-cms/releases/tag/v2.4.0
• https://www.exploit-db.com/exploits/40412/

Published

Feb 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7393Stack-based buffer overflow in the aac_sync function in aac_…
• CVE-2016-7394tiki wiki cms groupware <=15.2 has a xss vulnerability, allo…
• CVE-2016-7395SkPath.cpp in Skia, as used in Google Chrome before 53.0.278…
• CVE-2016-7397The Frontend component in Sophos UTM with firmware 9.405-5 a…
• CVE-2016-7398A type confusion vulnerability in the merge_param() function…9.8
• CVE-2016-7399scripts/license.pl in Veritas NetBackup Appliance 2.6.0.x th…
• CVE-2016-7401The cookie parsing code in Django before 1.8.15 and 1.9.x be…
• CVE-2016-7402SAP ASE 16.0 SP02 PL03 and prior versions allow attackers wh…
• CVE-2016-7404OpenStack Magnum passes OpenStack credentials into the Heat …
• CVE-2016-7405The qstr method in the PDO driver in the ADOdb Library for P…
• CVE-2016-7406Format string vulnerability in Dropbear SSH before 2016.74 a…
• CVE-2016-7407The dropbearconvert command in Dropbear SSH before 2016.74 a…