Security Exponent CMS 2.3.9 Blind SQL Injection September 20, 2016 007admin Leave a comment Exponent CMS versions 2.3.9 and below suffer from a remote blind SQL injection vulnerability.