SEPTEMBER 21, 2026
Live Feed
Back to database
Case File

CVE-2016-9481

CRITICAL · CVSS 9.8 EPSS 1.76%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-11-29 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It involves a SQL injection risk.

CVE
CVE-2016-9481
Severity
CRITICAL
CVSS
9.8
EPSS
1.76%

Original NVD Description

In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments. The method showComments is defined in the expCommentControllercontroller with the parameter '$this->params['content_id']' used directly in SQL. Impact is a SQL injection.