Description (CNA)
SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/417218
- http://www.securityfocus.com/bid/15389
- http://www.osvdb.org/21023
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23109
- http://secunia.com/advisories/17655
- http://secunia.com/advisories/17505
ADP enrichment
No English description supplied.