Security Advisory
CVE-2016-9282
7.5
HIGH
Vulnerability Description
SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attackers to read database information via action=search&module=search with the search_string parameter.
Published Date
November 11, 2016
Official Source
NIST NVD Advisory