Description
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the search_string parameter.
Unscored
CVE-2016-9282
EUVD-2016-10093GHSA-c7x2-8jwx-9vxp
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database …
Published Nov 11, 2016 · Updated Aug 6, 2024 · Assigned by mitre