cve.bz

CVE-2016-9272

9.1 criticalEPSS 2.2%

Critical (9.1) in exponentcms exponent cms. EPSS 2.2% chance of exploitation in the next 30 days.

A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site database information disclosure and denial of service.

Severity

CVSS 3.0

9.1 critical
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS
2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE
CWE-89
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON