CVE-2016-7783

CVE-2016-7783 is a SQL injection vulnerability affecting Exponent CMS 2.3.9 and earlier, exploitable via the title parameter in framework/core/models/expRecord.php. The issue allows remote attackers to execute arbitrary SQL commands. In NVD, the CVSS2 base score is 7.5 (HIGH) and the CVSS3 vector...

Exponent CMS 2.3.9 SQL Injection Vulnerability

Exploit for php platform in category web applications Exponent CMS 2.3.9 SQL Injection Vulnerability Disclose 10 cve in Exponent CMS CVE-2016-7780 In the line 42 of cron/findhelp.php , $GET'version' can be controlled and injected. It is possible to time-based blind SQL Inject by the param of...