EC
Product
Exponent Cms
7
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Exponent Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-2252 | – | Apr 25 | Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a Affected: 0.96.5_rc1; 0.96.6_alpha |
| CVE-2007-2253 | – | Apr 25 | Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2)… Affected: through 0.96.6_alpha |
| CVE-2006-4963 | – | Sep 23 | Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a Affected: 0.96.3 |
| CVE-2006-1604 | – | Apr 4 | Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." Affected: 0.94; 0.95; 0.96.1; 0.96.4 |
| CVE-2006-1607 | – | Apr 4 | Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors Affected: 0.94; 0.95; 0.96.1; 0.96.4 |
| CVE-2006-1605 | – | Apr 4 | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." Affected: 0.94; 0.95; 0.96.1; 0.96.4 |
| CVE-2006-1606 | – | Apr 4 | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors Affected: 0.94; 0.95; 0.96.1; 0.96.4 |
Showing 7
