Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Narendra Bhati

Narendra Bhati

Security Analyst · Not a member

Narendra Bhati's latest activity

Thursday, December 04 2014
1238 Time Based SQL Injection " User Agent" was updated in Exponent CMS
  • Narendra Bhati
    Narendra Bhati commented at 7:36 PM

    Any update regarding this issue ?
Monday, November 17 2014
1237 XSS In Exponent 2.3.1 Manage Page was updated in Exponent CMS
1236 No HTTP Only Flag Allow An Attacker TO Access Cookies Using XSS Attack was updated in Exponent CMS
1235 XSS In Exponent 2.3.1 was updated in Exponent CMS
1238 Time Based SQL Injection " User Agent" was updated in Exponent CMS
Sunday, November 16 2014
1239 Whole CMS Is Vulnerable To Reflected XSS was updated in Exponent CMS
  • Narendra Bhati
    Narendra Bhati commented at 7:33 PM

    i am 100% sure , that i am using 2.1.4 patch 6 which i have downloaded on 14 nov 2014
  • Narendra Bhati
    • Assigned user set to expNinja
    by Narendra Bhati at 7:30 PM

    yaa right , i have downloaded the new version of your cms 4 days before !

    but for make me sure , kindly send me the link where i can download the new version !
  • Narendra Bhati
    Narendra Bhati created the ticket at 2:28 PM

    Hey Exponent CMS

    want to report critical conditions of your cms , that your whole cms is vulnerable to Reflected XSS Attack

    how ?
    Lets see

    suppose you heve this...
1238 Time Based SQL Injection " User Agent" was updated in Exponent CMS
1235 XSS In Exponent 2.3.1 was updated in Exponent CMS