CVE-2017-7991

Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules/eaas/controllers/eaasController.php.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.11% chance of exploitation in the next 30 days, 80th percentile

Published

2017-04-22

Updated

2024-08-05

Proof-of-concept exploits (3)

• http://seclists.org/fulldisclosure/2017/Apr/78
• https://gist.github.com/404notf0und/ab59234d71fbf35b4926ffd646324f29
• https://packetstormsecurity.com/files/142258/Exponent-CMS-2.4.1-SQL-Injection.html

References

• CVE Record
• NVD entry

Related

• CVE-2017-7990
• CVE-2017-7994
• CVE-2017-7981
• CVE-2017-7997
• CVE-2017-7962
• CVE-2017-7998