system
Describe <CVE-2016-9087>.
user
What is <CVE-2016-9087>?
assistant
SQL injection vulnerability in framework/modules/filedownloads/controllers/filedownloadController.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the fileid parameter..