| Package | Affected versions | Patched versions |
|---|---|---|
| exponent cms | ≤ 2.3.9 |
SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free