Unrated

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addCo...

CVE-2016-9283 First seen on SecPulse Nov 12, 2016

Original description The description as published by the source.

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory securityfocus.com
patch github.com
web securitytracker.com

Key facts

Severity: Unrated
Published: Nov 12, 2016
First seen on SecPulse: Nov 12, 2016

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:47