CVE Catalog
CVE-2016-7095
CriticalSummary
Exponent CMS versions before 2.3.9 are vulnerable to an attacker uploading a malicious script file via redirection, allowing the script to be placed in an unprotected folder that permits script execution.
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code on the server, potentially leading to system compromise and data loss.
Recommendation
It is recommended to update Exponent CMS to version 2.3.9 or later to mitigate this vulnerability and implement proper folder security on the server.
Original NVD description (English source)
Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution.