First published: Thu Dec 31 2020(Updated: )
Exponent CMS before 2.6.0 has improper input validation in purchaseOrderController.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Exponentcms Exponent Cms | <2.6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-9025 has a medium severity rating due to its improper input validation issues.
To fix CVE-2016-9025, upgrade Exponent CMS to version 2.6.0 or later.
Exponent CMS versions prior to 2.6.0 are affected by CVE-2016-9025.
The impact of CVE-2016-9025 includes the potential for unauthorized actions due to improper input validation.
CVE-2016-9025 was published in 2016, highlighting vulnerabilities in earlier versions of Exponent CMS.