CVE-2007-2252
Published Apr 25, 2007Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icod…
Vendor/product archive
exponent / exponent_cms CVEs
Beta · best-effort7 CVEs tagged to exponent / exponent_cms — 1 Critical, 2 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2007-2253
Published Apr 25, 2007Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.ph…
CVE-2006-4963
Published Sep 23, 2006Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view par…
CVE-2006-1604
Published Apr 4, 2006Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."
CVE-2006-1605
Published Apr 4, 2006Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."
CVE-2006-1606
Published Apr 4, 2006Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors.
CVE-2006-1607
Published Apr 4, 2006Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors.
Showing 1-7 of 7 CVEsPage 1 of 1