CVE-2016-2242

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2242
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2242.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2242
Published
2017-01-23T21:59:01.097Z
Modified
2026-07-08T05:48:15.121851006Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "2.0.4-p3"
                },
                {
                    "last_affected": "2.0.4-p3"
                },
                {
                    "introduced": "2.1.0-alpha"
                },
                {
                    "last_affected": "2.1.0-alpha"
                }
            ],
            "cpes": [
                "cpe:2.3:a:exponentcms:exponent_cms:2.0.4:p3:*:*:*:*:*:*",
                "cpe:2.3:a:exponentcms:exponent_cms:2.1.0:alpha:*:*:*:*:*:*"
            ],
            "source": "CPE_STRING",
            "vendor_product": "exponentcms:exponent_cms"
        }
    ]
}
References

Affected packages

Git / github.com/exponentcms/exponent-cms

Affected ranges

Type
GIT
Repo
https://github.com/exponentcms/exponent-cms
Events
Introduced
0105cda947bb0d0c27a5230a80308347766603fe
Last affected
7f720cd5eb48160402dc8f4f57ac28b23bd84e14
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "2.0.1"
        },
        {
            "last_affected": "2.0.1"
        },
        {
            "introduced": "2.0.2"
        },
        {
            "last_affected": "2.0.2"
        },
        {
            "introduced": "2.0.3"
        },
        {
            "last_affected": "2.0.3"
        },
        {
            "introduced": "2.0.4"
        },
        {
            "last_affected": "2.0.4"
        },
        {
            "introduced": "2.0.5"
        },
        {
            "last_affected": "2.0.5"
        },
        {
            "introduced": "2.0.5-p1"
        },
        {
            "last_affected": "2.0.5-p1"
        },
        {
            "introduced": "2.0.6"
        },
        {
            "last_affected": "2.0.6"
        },
        {
            "introduced": "2.0.6-p2"
        },
        {
            "last_affected": "2.0.6-p2"
        },
        {
            "introduced": "2.0.7"
        },
        {
            "last_affected": "2.0.7"
        },
        {
            "introduced": "2.0.8"
        },
        {
            "last_affected": "2.0.8"
        },
        {
            "introduced": "2.0.8-p2"
        },
        {
            "last_affected": "2.0.8-p2"
        },
        {
            "introduced": "2.0.9"
        },
        {
            "last_affected": "2.0.9"
        },
        {
            "introduced": "2.0.9-p5"
        },
        {
            "last_affected": "2.0.9-p5"
        },
        {
            "introduced": "2.1.1"
        },
        {
            "last_affected": "2.1.1"
        },
        {
            "introduced": "2.1.2"
        },
        {
            "last_affected": "2.1.2"
        },
        {
            "introduced": "2.1.3"
        },
        {
            "last_affected": "2.1.3"
        },
        {
            "introduced": "2.1.4"
        },
        {
            "last_affected": "2.1.4"
        },
        {
            "introduced": "2.1.4-p11"
        },
        {
            "last_affected": "2.1.4-p11"
        },
        {
            "introduced": "2.2.0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "2.2.0-p5"
        },
        {
            "last_affected": "2.2.0-p5"
        },
        {
            "introduced": "2.2.1"
        },
        {
            "last_affected": "2.2.1"
        },
        {
            "introduced": "2.2.2"
        },
        {
            "last_affected": "2.2.2"
        },
        {
            "introduced": "2.2.2-p2"
        },
        {
            "last_affected": "2.2.2-p2"
        },
        {
            "introduced": "2.2.3"
        },
        {
            "last_affected": "2.2.3"
        },
        {
            "introduced": "2.2.3-p14"
        },
        {
            "last_affected": "2.2.3-p14"
        },
        {
            "introduced": "2.3.0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "2.3.0-p4"
        },
        {
            "last_affected": "2.3.0-p4"
        },
        {
            "introduced": "2.3.1"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "2.3.1-p4"
        },
        {
            "last_affected": "2.3.1-p4"
        },
        {
            "introduced": "2.3.2"
        },
        {
            "last_affected": "2.3.2"
        },
        {
            "introduced": "2.3.2-p2"
        },
        {
            "last_affected": "2.3.2-p2"
        },
        {
            "introduced": "2.3.3"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "2.3.3-p1"
        },
        {
            "last_affected": "2.3.3-p1"
        },
        {
            "introduced": "2.3.4"
        },
        {
            "last_affected": "2.3.4"
        },
        {
            "introduced": "2.3.4-p1"
        },
        {
            "last_affected": "2.3.4-p1"
        },
        {
            "introduced": "2.3.5"
        },
        {
            "last_affected": "2.3.5"
        },
        {
            "introduced": "2.3.5-p2"
        },
        {
            "last_affected": "2.3.5-p2"
        },
        {
            "introduced": "2.3.7"
        },
        {
            "last_affected": "2.3.7"
        },
        {
            "introduced": "2.3.8"
        },
        {
            "last_affected": "2.3.8"
        }
    ],
    "cpe": [
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.5:p1:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.6:p2:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.8:p2:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.0.9:p5:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.1.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.1.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.1.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.1.4:p11:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.0:p5:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.2:p2:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.2.3:p14:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.0:p4:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.1:p4:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.2:p2:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.3:p1:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.4:p1:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.5:p2:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:exponentcms:exponent_cms:2.3.8:*:*:*:*:*:*:*"
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.5-p1
2.0.6
2.0.6-p2
2.0.7
2.0.8
2.0.8-p2
2.0.9
2.0.9-p5
2.1.1
2.1.2
2.1.3
2.1.4
2.1.4-p11
2.2.0
2.2.0-p5
2.2.1
2.2.2
2.2.2-p2
2.2.3
2.2.3-p14
2.3.0
2.3.0-p4
2.3.1
2.3.1-p4
2.3.2
2.3.2-p2
2.3.3
2.3.3-p1
2.3.4
2.3.4-p1
2.3.5
2.3.5-p2
2.3.7
2.3.8
v2.*
v2.0.0
v2.0.1
v2.0.1patch1
v2.0.2
v2.0.3
v2.0.9
v2.0.9patch1
v2.0.9patch2
v2.0.9patch3
v2.0.9patch4
v2.0.9patch5
v2.1.0
v2.1.1
v2.1.2
v2.1.3
v2.1.4
v2.2.0
v2.2.0patch1
v2.2.0patch2
v2.2.0patch3
v2.2.0patch4
v2.2.0patch5
v2.2.1
v2.2.2
v2.2.2patch1
v2.2.2patch2
v2.2.3
v2.2.3patch1
v2.2.3patch2
v2.2.3patch3
v2.2.3patch4
v2.3.0
v2.3.0patch1
v2.3.0patch2
v2.3.0patch3
v2.3.0patch4
v2.3.1
v2.3.1patch4
v2.3.2
v2.3.2patch1
v2.3.2patch2
v2.3.3
v2.3.3patch1
v2.3.4
v2.3.4patch1
v2.3.5
v2.3.5patch1
v2.3.5patch2
v2.3.6
v2.3.7
v2.3.7patch1
v2.3.7patch2
v2.3.7patch3
v2.3.7patch4
v2.3.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2242.json"