Lucene search
+L

2 matches found

CVE
CVE
added 2017/03/07 4:0 p.m.49 views

CVE-2016-7788

CVE-2016-7788 - Exponent CMS : A SQL injection in framework/modules/users/models/user.php affects Exponent CMS 2.3.9 and earlier, allowing remote attackers to execute arbitrary SQL via the username parameter. OpenVAS aggregates this under “Exponent CMS

9.8CVSS10AI score0.02567EPSS
SaveExploits1References4Affected Software1
zdt
zdt
added 2016/11/02 12:0 a.m.73 views

Exponent CMS 2.3.9 SQL Injection Vulnerability

Exploit for php platform in category web applications Exponent CMS 2.3.9 SQL Injection Vulnerability Disclose 10 cve in Exponent CMS CVE-2016-7780 In the line 42 of cron/findhelp.php , $GET'version' can be controlled and injected. It is possible to time-based blind SQL Inject by the param of...

7.5CVSS9.2AI score0.03302EPSS
SaveExploits2
Rows per page
Query Builder