# CVEs published 2016-11-11

9 CVEs were published on November 11, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-9288](https://cve.now/CVE-2016-9288.md): In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "Dr (no CVSS)
- [CVE-2016-9282](https://cve.now/CVE-2016-9282.md): SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database i (no CVSS)
- [CVE-2016-9283](https://cve.now/CVE-2016-9283.md): SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via add (no CVSS)
- [CVE-2016-9284](https://cve.now/CVE-2016-9284.md): getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user inform (no CVSS)
- [CVE-2016-9285](https://cve.now/CVE-2016-9285.md): framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via (no CVSS)
- [CVE-2016-9286](https://cve.now/CVE-2016-9286.md): framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, whic (no CVSS)
- [CVE-2016-9277](https://cve.now/CVE-2016-9277.md): Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of service (UI restart) vi (no CVSS)
- [CVE-2016-9274](https://cve.now/CVE-2016-9274.md): Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the curr (no CVSS)
- [CVE-2016-9272](https://cve.now/CVE-2016-9272.md): A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information di (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-11-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.