Non évaluée

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addCo...

CVE-2016-9283 Première détection SecPulse Nov 12, 2016

Description d'origine La description telle que publiée par la source (souvent en anglais).

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory securityfocus.com
patch github.com
web securitytracker.com

Faits clés

Gravité: Non évaluée
Publication: Nov 12, 2016
Première détection SecPulse: Nov 12, 2016

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:47