CVE-2016-9288 | BDVDB-2026-79277 Detail

Description#

In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without any filtration which caused SQL injection. The payload can be used like this: /navigation/DragnDropReRank/target/1.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securitytracker.com/id/1037280
https://github.com/exponentcms/exponent-cms/commit/2ddffb2e7eafe4830e3483a4b437873022c461ba
http://www.securityfocus.com/bid/94296

Exploit#

No public exploit known

History#

Version 12016-11-11Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.