CVE-2016-9272

Published November 11th, 2016

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.

exponentcms/exponent-cms

Content Management, Simple.

GitHub