Exponent » Exponent Cms : Security Vulnerabilities, CVEs,
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
Max CVSS
5.0
EPSS Score
0.71%
Published
2007-04-25
Updated
2017-07-29
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.
Max CVSS
5.0
EPSS Score
1.25%
Published
2007-04-25
Updated
2017-07-29
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.
Max CVSS
6.4
EPSS Score
1.71%
Published
2006-09-23
Updated
2017-10-19
Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors.
Max CVSS
7.5
EPSS Score
1.07%
Published
2006-04-04
Updated
2017-07-20
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors.
Max CVSS
5.0
EPSS Score
0.34%
Published
2006-04-04
Updated
2011-03-08
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."
Max CVSS
7.5
EPSS Score
5.01%
Published
2006-04-04
Updated
2011-03-08
Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."
Max CVSS
10.0
EPSS Score
0.41%
Published
2006-04-04
Updated
2011-03-08
7 vulnerabilities found