CVE-2016-9283

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

CVE-2016-9283

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

CVE-2016-9283

CVE-2016-9283 affects Exponent CMS v2.4.0 and is due to an SQL injection in framework/core/subsystems/expRouter.php, enabling remote attackers to read database information via address/addContentToSearch/id/ and a trailing string related to the sef URL mechanism. Multiple feeds (NVD entry, CNVD/CV...