CVE-2016-9272: Improper Neutralization of Special Elements used in an SQL Command

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service...