CVE-2016-8898

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2019-16421)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability exists in the...

Sql injection

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

CVE-2016-8898

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

CVE-2016-8898

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

CVE-2016-8898

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...

CVE-2016-8898

Summary: CVE-2016-8898 affects Exponent CMS 2.3.9, with a SQL injection vulnerability in framework/modules/ecommerce/controllers/cartController.php. The issue is a database-level injection vulnerability in that cart controller path. The NVD entry lists a high/critical impact profile (CVSS v2: HIG...

PT-2019-7848

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.3.9 Description The issue is related to a sql injection vulnerability. It affects the cartController.php file in the ecommerce module of the framework. Recommendations For Exponent CMS version 2.3.9, update to a newer...

CVE-2016-8898: Improper Neutralization of Special Elements used in an SQL Command

Exponent CMS version 2.3.9 suffers from a sql injection vulnerability in framework/modules/ecommerce/controllers/cartController.php...