2 matches found
CVE-2017-7991
Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key apikey parameter in the api function of framework/modules/eaas/controllers/eaasController.php...
9.8CVSS7.9AI score
SaveExploits0References4
Sql injection
Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key apikey parameter in the api function of framework/modules/eaas/controllers/eaasController.php...
7.5CVSS9.7AI score0.02109EPSS
SaveExploits3References4Affected Software1
20