CVE-2017-5879: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Exponent CMS 2.4.1. This is a blind SQL injection that can be exploited by un-authenticated users via an HTTP GET request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as selectloadfile. The vulnerability...

Exponent CMS 2.3.9 Cross Site Scripting

======================================================================== | Title : Exponent CMS versions 2.3.9 XSS vulnerability | Author : indoushka | email : [email protected] | Tested on : windows 8.1 FranASSais V.Pro | Version : 2.3.9 | Vendor :...