Exponent Cms

exponent_cms

Vendor: Exponent • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-2253 1Exponent 1Exponent Cms Apr 23, 2026 Apr 25, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
CVE-2007-2252 1Exponent 1Exponent Cms Apr 23, 2026 Apr 25, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.
CVE-2006-4963 1Exponent 1Exponent Cms Apr 16, 2026 Sep 23, 2006 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the cal...Show more Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.Show less
CVE-2006-1607 1Exponent 1Exponent Cms Apr 16, 2026 Apr 4, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors.
CVE-2006-1606 1Exponent 1Exponent Cms Apr 16, 2026 Apr 4, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors.
CVE-2006-1605 1Exponent 1Exponent Cms Apr 16, 2026 Apr 4, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."
CVE-2006-1604 1Exponent 1Exponent Cms Apr 16, 2026 Apr 4, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."