Security Advisory

CVE-2017-7991

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-22 01:00:00

Last updated 2024-08-05 16:19:29

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.

← Browse all CVEs View on cve.org ↗