CVE-2016-9087

2017-03-0716:59:01

Google

osv.dev

9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.6%

JSON

SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the fileid parameter.

CPENameOperatorVersion
exponent-cmseq2.2.0alpha2
exponent-cmseq2.2.3patch1
exponent-cmseq2.2.2patch1
exponent-cmseq2.1.1
exponent-cmseq2.1.2
exponent-cmseq2.2.3patch2
exponent-cmseq2.0.9patch2
exponent-cmseq2.0.0
exponent-cmseq2.1.3
exponent-cmseq2.2.3

Name	Operator	Version
exponent-cms	eq	2.2.0alpha2
exponent-cms	eq	2.2.3patch1
exponent-cms	eq	2.2.2patch1
exponent-cms	eq	2.1.1
exponent-cms	eq	2.1.2
exponent-cms	eq	2.2.3patch2
exponent-cms	eq	2.0.9patch2
exponent-cms	eq	2.0.0
exponent-cms	eq	2.1.3
exponent-cms	eq	2.2.3