Total
7 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2007-2252 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 5.0 MEDIUM | N/A |
| Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter. | |||||
| CVE-2007-2253 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 5.0 MEDIUM | N/A |
| Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php. | |||||
| CVE-2006-4963 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 6.4 MEDIUM | N/A |
| Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files. | |||||
| CVE-2006-1606 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 5.0 MEDIUM | N/A |
| Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors. | |||||
| CVE-2006-1604 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 10.0 HIGH | N/A |
| Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." | |||||
| CVE-2006-1607 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 7.5 HIGH | N/A |
| Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors. | |||||
| CVE-2006-1605 | 1 Exponent | 1 Exponent Cms | 2023-12-10 | 7.5 HIGH | N/A |
| Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." | |||||