Security Advisory
CVE-2016-9283
7.5
HIGH
Vulnerability Description
SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue.
Published Date
November 11, 2016
Official Source
NIST NVD Advisory