CVE-2016-9285

framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id…

published November 11, 2016

CVSS
—
EPSS
1%
Percentile
73.5
In the wild
Unconfirmed
What it is

framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id number, as demonstrated by address/edit/id/1, related to an "addresses, countries, and regions" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01476 · 73.5th percentile
Published
2016-11-11T22:00Z
EPSS history
Timeline
  • 11 NOV 22:00Z
    framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id…
    cvelistv5