# Exponentcms Exponent Cms


- [CVE-2016-9021](https://insights.sbomify.com/CVE-2016-9021/): Exponent CMS before 2.6.0 has improper input validation in storeController.php. (critical 9.8)
- [CVE-2016-9022](https://insights.sbomify.com/CVE-2016-9022/): Other in n/a (critical 9.8)
- [CVE-2016-9023](https://insights.sbomify.com/CVE-2016-9023/): Other in n/a (critical 9.8)
- [CVE-2016-9025](https://insights.sbomify.com/CVE-2016-9025/): Other in n/a (critical 9.8)
- [CVE-2016-9026](https://insights.sbomify.com/CVE-2016-9026/): File upload in n/a (critical 9.8)
- [CVE-2016-8898](https://insights.sbomify.com/CVE-2016-8898/): SQL injection in n/a (critical 9.8)
- [CVE-2016-8900](https://insights.sbomify.com/CVE-2016-8900/): Deserialization in n/a (critical 9.8)
- [CVE-2016-8897](https://insights.sbomify.com/CVE-2016-8897/): SQL injection in n/a (critical 9.8)
- [CVE-2016-8899](https://insights.sbomify.com/CVE-2016-8899/): Deserialization in n/a (critical 9.8)
- [CVE-2016-7443](https://insights.sbomify.com/CVE-2016-7443/): File upload in n/a (critical 9.8)
- [CVE-2017-7991](https://insights.sbomify.com/CVE-2017-7991/): SQL injection in n/a (critical 9.8)
- [CVE-2016-7780](https://insights.sbomify.com/CVE-2016-7780/): SQL injection in n/a (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/exponentcms/exponent-cms/