Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

There was a problem

You must be a member of this account.

Sachin Wagh

Sachin Wagh

Not a member

Sachin Wagh's latest activity

Thursday, February 25 2016
1355 Exponent CMS 2.3.7 - SWF File Upload Cross Site Scripting Vulnerability was created in Exponent CMS
  • Sachin Wagh
    Sachin Wagh created the ticket at 7:36 AM

    Information

    Vulnerability Type : Exponent CMS 2.3.7 -File Upload Cross Site Scripting Vulnerability
    Vulnerable Version : 2.3.7
    CVE-ID :
    Severity: High
    Author – ...
Wednesday, February 10 2016
1347 Exponent CMS 2.3.7 - Command Execution Vulnerability was updated in Exponent CMS
Wednesday, February 03 2016
1347 Exponent CMS 2.3.7 - Command Execution Vulnerability was updated in Exponent CMS
  • Sachin Wagh
    Sachin Wagh commented at 7:09 PM

    Hi dleffler,

    Any update on this.

    Thanks.

    Best Regards,

    Sachin Wagh.
Monday, February 01 2016
1347 Exponent CMS 2.3.7 - Command Execution Vulnerability was updated in Exponent CMS
  • Sachin Wagh
    Sachin Wagh commented at 4:34 PM

    Hi dleffler,

    Agree for below point

    "the 'page not found' exponent message is due to attempting to open a folder which the main .htaccess file has the server kic...
  • Sachin Wagh
    • Assigned user set to expNinja
    by Sachin Wagh at 6:44 AM

    Hi,

    Please find attached POC video.

    Thanks.
Sunday, January 31 2016
1347 Exponent CMS 2.3.7 - Command Execution Vulnerability was updated in Exponent CMS
Saturday, January 30 2016
1347 Exponent CMS 2.3.7 - Command Execution Vulnerability was created in Exponent CMS
  • Sachin Wagh
    Sachin Wagh created the ticket at 3:39 PM

    Description:

    Exponent CMS → 2.3.7 suffers from an unauthenticated arbitrary command execution vulnerability. The issue is caused due to the improper verificatio...
Saturday, December 26 2015
1322 Exponent CMS → 2.3.5: Administrators may be able to edit super-administrator ... was updated in Exponent CMS
  • Sachin Wagh
    Sachin Wagh commented at 5:56 PM

    Ok dleffer.

    Thanks.
  • Sachin Wagh
    Sachin Wagh commented at 5:06 PM

    Hi dleffer,

    Even if the user admin or superadmin can see the information vice versa by tampering parameter.

    Thanks.
1323 Exponent CMS 2.3.5 -File Upload Cross Site Scripting Vulnerability was updated in Exponent CMS
  • Sachin Wagh
    Sachin Wagh commented at 5:54 PM

    Thanks dleffler.

    Once got the CVE-ID please update me accordingly.

    Thanks.