CVE Catalog
CVE-2016-9272
CriticalSummary
A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.
Risk Assessment
The organization may be exposed to sensitive data disclosure and attacks that could result in service unavailability.
Recommendation
It is recommended to update Exponent CMS to the latest version to mitigate this vulnerability and to monitor logs for potential attacks.
Original NVD description (English source)
A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.