CVE-2016-9242

Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 contenttype or 2 subtype parameter...

PT-2016-7714

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue concerns SQL injection vulnerabilities in the update method within the expRatingController.php file of Exponent CMS. These vulnerabilities allow remote authenticated users to execute arbitrary S...

CVE-2016-9242: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the update method in framework/modules/core/controllers/expRatingController.php in Exponent CMS 2.4.0 allow remote authenticated users to execute arbitrary SQL commands via the 1 contenttype or 2 subtype parameter...