CVE-2016-7565: Exponentcms Exponent CMS

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

install/index.php in Exponent CMS 2.3.9 allows remote attackers to execute arbitrary commands via shell metacharacters in the sc array parameter.

Affected products

• Exponentcms Exponent CMS: version 2.3.9 only

Published 2017-02-13. Last modified 2026-06-17.