CVE-2016-9288

Critical

Published: 11/11/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In Exponent CMS v2.4.0 and older, the 'target' parameter of the 'DragnDropReRank' function is used without filtration, leading to SQL injection vulnerability.

Risk Assessment

An attacker can exploit this vulnerability to execute unauthorized database queries, potentially leading to data disclosure or modification.

Recommendation

It is recommended to update Exponent CMS to the latest version and implement input parameter filtration in the 'DragnDropReRank' function.

Original NVD description (English source)

In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "target" of function "DragnDropReRank" is directly used without any filtration which caused SQL injection. The payload can be used like this: /navigation/DragnDropReRank/target/1.