# CVEs published 2016-11-11

9 CVEs were published on November 11, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-9288](https://cve.now/CVE-2016-9288.md): In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function… (no CVSS)
- [CVE-2016-9282](https://cve.now/CVE-2016-9282.md): SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database… (no CVSS)
- [CVE-2016-9283](https://cve.now/CVE-2016-9283.md): SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via… (no CVSS)
- [CVE-2016-9284](https://cve.now/CVE-2016-9284.md): getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user… (no CVSS)
- [CVE-2016-9285](https://cve.now/CVE-2016-9285.md): framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information… (no CVSS)
- [CVE-2016-9286](https://cve.now/CVE-2016-9286.md): framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records… (no CVSS)
- [CVE-2016-9277](https://cve.now/CVE-2016-9277.md): Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart)… (no CVSS)
- [CVE-2016-9274](https://cve.now/CVE-2016-9274.md): Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the… (no CVSS)
- [CVE-2016-9272](https://cve.now/CVE-2016-9272.md): A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.