CVE Catalog
CVE-2016-7453
CriticalSummary
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 is vulnerable to an SQL Injection attack.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.
Recommendation
It is recommended to update Exponent CMS to version 2.3.9 patch 2 or later to mitigate this vulnerability.
Original NVD description (English source)
The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.