CVE-2016-2242

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-2242
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2242.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2242
Published
2017-01-23T21:59:01.097Z
Modified
2026-04-10T03:49:00.804646Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php.

References

Affected packages

Git / github.com/exponentcms/exponent-cms

Affected ranges

Type
GIT
Repo
https://github.com/exponentcms/exponent-cms
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0105cda947bb0d0c27a5230a80308347766603fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5a7caf251d130dd4ad2ae8e01b4cbf791aadf0cc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
34436c494da2ef1d10ab6e6c0343cf7abe935fb6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e634bc06e89d2808311a52751296388a517e3f0e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
45414e060e7547dce76f73adcd79ab0a14be9767
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
048f37687f7eeedc5583af0cd449c17184f35a1b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8af1ef3b38ebe8638aa6bd64ffc944e1d7b450c2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bf425a635721635d9fbf1e3b814cc0de6c25a968
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0c648f0941500a8e444a257bcb6611e6d02018fc
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5d75ba76cf5fc83d3aa51cbb9e640cb85c55f7c5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de0b7f1e53b6d2641339652084042cde73153347
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b13daf99201eab748c156374aeaa8b555f71ca10
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
123699a12bc254b6e9729f135659105538f1c347
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a8cddcc0558eb9b82477c7f4bce3bf3f6cea29a5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4570a049570c3568ec429bc43693bba3bfe62554
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3473c4a7a753f40ecc1a2367a101db0c0d7de00c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
882be2f426be02b93022171b35584065cdd9b46d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a15f7f23063ea47cb4e97660469d3601d619ba1e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ea3a5d81394a17ba7671f1dac3a765c5d8f9ed70
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
15ee0fc469f70a15d5cbc600e8fcde60b85edc14
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
08a6fc06021ee2a92622b135c6b08170e23f0476
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8534053b6f687ac3fdc9e93351efadc398986036
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
92b3598bc53180c6cda828144825c95de4d7bbdb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3470067a7d47e45d97c6847e4db9d3edbc520c43
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1d46b63398ea11be71aa8830d32209f1ac242dea
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0fc3dc69055c8ad29674b22985f10b6e2cc2cf59
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a86aee920364338bb3e9c72814bdb8abd61390e6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
21c15d915abfcf52f88433f72b87f985bf4773da
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d90cf229cdcbdfeaa54278e93c01f2cb6edabe4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7103199e47081c3de405e67f28611843f2d5198c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4968b3d4dc6b73a866ee4d01345dfea969a358ef
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
aab90d80f744d6b0f46b092bd6630f38182a8350
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d35569d1aebc565322a49b5bc3a7b4a88190f6fa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e2078799270bc422b4893359c49374a7ced76336
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
28a1e11871b60c3a9b97da43bf22f19cad859bf6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2c1480545ac137f81d2f51f4bd806773a3131bf6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5546507c56feed0d9f8fa443fcf3d0ab40a38501
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
75af30c27e57c1eb914c90e82c383550ead5f273
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6ebd9c6ef6599e0cf4a9dc3b1039e59c10112628
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7f720cd5eb48160402dc8f4f57ac28b23bd84e14
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.5-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.6-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.8-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.0.9-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.4-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.0-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.2-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.2.3-p14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.1-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.2-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.3-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.4-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.5-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.8"
        }
    ]
}

Affected versions

Other
Beta1
beta1.*
beta1.1
v2.*
v2.0.0
v2.0.0.beta2
v2.0.0.beta2.1
v2.0.0.beta3
v2.0.0.beta4
v2.0.0.release-candidate1
v2.0.0.release-candidate2
v2.0.1
v2.0.1patch1
v2.0.2
v2.0.3
v2.0.4
v2.0.5
v2.0.5patch1
v2.0.6
v2.0.6patch1
v2.0.6patch2
v2.0.7
v2.0.8
v2.0.8patch1
v2.0.8patch2
v2.0.9
v2.0.9patch1
v2.0.9patch2
v2.0.9patch3
v2.0.9patch4
v2.0.9patch5
v2.1.0
v2.1.1
v2.1.2
v2.1.3
v2.1.4
v2.1.4patch1
v2.1.4patch11
v2.1.4patch2
v2.1.4patch6
v2.1.4patch7
v2.1.4patch8
v2.1.4patch9
v2.2.0
v2.2.0patch1
v2.2.0patch2
v2.2.0patch3
v2.2.0patch4
v2.2.0patch5
v2.2.1
v2.2.2
v2.2.2patch1
v2.2.2patch2
v2.2.3
v2.2.3patch1
v2.2.3patch10
v2.2.3patch11
v2.2.3patch12
v2.2.3patch14
v2.2.3patch2
v2.2.3patch3
v2.2.3patch4
v2.2.3patch5
v2.2.3patch9
v2.3.0
v2.3.0patch1
v2.3.0patch2
v2.3.0patch3
v2.3.0patch4
v2.3.1
v2.3.1patch4
v2.3.2
v2.3.2patch1
v2.3.2patch2
v2.3.3
v2.3.3patch1
v2.3.4
v2.3.4patch1
v2.3.5
v2.3.5patch1
v2.3.5patch2
v2.3.6
v2.3.7
v2.3.7patch1
v2.3.7patch2
v2.3.7patch3
v2.3.7patch4
v2.3.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2242.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.0.4-p3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "2.1.0-alpha"
            }
        ]
    }
]