Security Advisory
CVE-2016-9284
5.3
MEDIUM
Vulnerability Description
getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via users/getUsersByJSON/sort/ and a trailing string.
Published Date
November 11, 2016
Official Source
NIST NVD Advisory