CVE-2016-7565

Critical

Published: 13/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Exponent CMS version 2.3.9, the install/index.php file allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.

Risk Assessment

An attacker can exploit this vulnerability to execute remote code, potentially leading to system compromise.

Recommendation

It is recommended to update Exponent CMS to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.