CVE-2016-7789
Summary
by MITRE
SQL injection vulnerability in framework/core/models/expConfig.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the apikey parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 09/29/2022
Xxx Xxx-xxxx-xxxx Xxxxxxxxxxxxx Xxxxxxxxxx X Xxxxxxxx Xxx Xxxxxxxxx Xxxx Xxxxxx Xxx Xxxxxxxx Xxx Xxx Xxx Xxxxxxx Xxxxxxxx Xxxx Xxxxxxx Xxx Xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx Xxxx Xx Xxxxxx Xxxxxxxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxx Xxxxxx Xxxxxxxxx Xxxxx Xxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxxxxxx. Xxx Xxxx Xxxxxx Xx Xxx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxxx Xxxx-xxxxxxxx Xxxx Xxxx Xxx Xxxxxx Xxxxxxxxx Xx Xxxxxxxx Xxxxxxxxxxxx Xxxx Xxx Xxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxx. Xxxxxxxxx Xxx Xxxxxxxx Xxxx Xxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxx Xxxx Xxxx Xxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxx Xxxxx Xxxxxxxxx Xxxx Xxxxxx Xxxxxxxxx Xxxxxxxx Xx Xx Xxxxxxxxxxx Xx Xxx Xxxxxxxx Xxxxxx Xxxx Xxxxxx Xxxx Xxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxx-xx Xxx Xxxxxxxxx Xxxxxxx Xxxxx Xxxxxxxxx Xxxx Xxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxxx Xxxxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxxxx Xxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxxxx Xxxx Xxxxxx Xxxxxx Xxxxxx Xx Xxxxxxxxxx Xxxxxxxx Xxxxxxxx, Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx, Xxxxxx Xxxx Xxxxxxxx, Xx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xxxxxx Xxx Xxx Xxxxxxxxxxx. Xxx Xxxxxxxx Xxxxxxxx Xxxxxx Xx Xxx Xxxxxxxxx.xxx Xxxx Xxxxx Xxx Xxxxxx Xxxxxxxxx Xx Xxxxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxxxx, Xxxxxxxx X Xxxxxx Xxxxxxx Xxx Xxx Xxxxxxxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxx Xxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxx Xxx&xx Xxxxxxxxx Xxxxx Xxx Xxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxx Xxxxxx, Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxx Xxxxx Xx Xxx Xxxxxxxxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxx-xxxx-xxxx Xxxxxxx Xxxxxx Xxxxxx Xxxx Xxxxx Xx Xxxxxxxxx Xxxx Xxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxxx. Xxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxx Xxxxxxxxxxxxx Xx Xxxx Xxxxxx Xx Xxxx Xxxxxxxxxxx, Xxxxxxx Xxxxxxxxxx Xxxx, Xxx Xxxxxxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxx Xxxxxx Xxx Xxxxxxxx Xxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxx Xxx Xxxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxx Xxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxx Xxxxxxx Xxxxxxx, Xxxxxx Xxxxxxxxx, Xx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxx Xxxx Xxxxxxxxxxxxxx Xxxxxxx Xxx Xxxxxxxx-xxxxxxxx Xxxx. Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxxxx Xxxx Xx Xxxx Xxxxxxxx, Xxxxxxx Xxxxxxxxxx, Xxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxx Xxx Xx Xxx Xxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxx Xx Xxxxxxx Xxx Xxxxxxxxx Xxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xx Xxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxx Xxx Xx Xxxxx Xxxxx Xxx Xxxxxxxxxxxxx Xxx Xxxx Xxxxxxxxx Xxxxxxx Xxxxxx Xxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx. Xxx Xxx Xxxxxxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxxxxxxxxx Xxxxxxx Xxxx Xxxxxxxx Xxx Xxxxxxx Xxxxxxxxx Xxxx Xxxx Xxxxxx, Xxxxxxxxxx Xxxxxxxxx Xxxxx Xxxx Xxxxx Xxxxxxxxxxx Xx Xxxxxxxxxx Xxxx. Xxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxx, Xxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx, Xxx Xxxxxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxxx Xx Xxxxxx Xxxxxxx Xxxxxxxxxx Xx Xxxx-xxxxxxxx Xxxx. Xxxxxxxx Xxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxx Xxx Xxxxxx Xxxx Xxx Xxx Xxxxxxxxxx Xxx Xxxxxxxxx Xxxxxxx Xx Xxxxxxx Xxxxxxxxxxxx Xx Xxxxx Xxxxxxxxxxxxxxx.