CVE record · 1 source
CVE-2026-108900
CVSS 7.3A vulnerability has been found in Exponent CMS up to 3.0.2patch2.
- Vendor
- Apache Software Foundation
- Product
- Other Apache projects
- CVSS
- 7.3
- Exposure class
- Web platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A vulnerability has been found in Exponent CMS up to 3.0.2patch2.
A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such manipulation leads to sql injection. It is possible to launch the attack…