CVE Catalog
CVE-2016-7452
HighSummary
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a directory traversal attack.
Risk Assessment
The organization may be exposed to malware and unauthorized access to data, potentially leading to serious security breaches.
Recommendation
It is recommended to update Exponent CMS to version 2.3.9 patch 2 or later to mitigate this vulnerability.
Other vulnerabilities in Pixidou Image Editor w Exponent CMS
Original NVD description (English source)
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to upload a malicious file to any folder on the site via a cpi directory traversal.