Unrated

getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via...

CVE-2016-9284 First seen on SecPulse Nov 12, 2016

Original description The description as published by the source.

getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via users/getUsersByJSON/sort/ and a trailing string.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory securityfocus.com
patch github.com
web securitytracker.com

Key facts

Severity: Unrated
Published: Nov 12, 2016
First seen on SecPulse: Nov 12, 2016

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:47