VULNERABILITY INTELLIGENCE

CVE-2016-7789

CVSS score9.8 CRITICAL

EPSS probability2.50%

CISA KEVNot currently listed

Published2017-03-07

Last modified2026-06-17

Description

SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter.