591 matches found
CVE-2006-4963
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. dot dot sequence in the view parameter in the showview action in the calendarmodule module, as demonstrated by executing PHP code through session files...
CVE-2006-4963
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. dot dot sequence in the view parameter in the showview action in the calendarmodule module, as demonstrated by executing PHP code through session files...
CVE-2006-4963
Exponent CMS 0.96.3 is vulnerable to a local file inclusion (LFI) via the view parameter in the calendarmodule’s show_view action (index.php). The underlying issue is improper handling of ../ sequences that allows remote attackers to read and execute arbitrary local files, demonstrated by PHP cod...
Exponent CMS 0.96.3 - view Remote Command Execution
Exponent CMS 0.96.3 - view Remote Command Execution !/usr/bin/php -q -d shortopentag=on...
Exponent CMS <= 0.96.3 (view) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ============================================================== Exponent CMS = 0.96.3 view Remote Command Execution Exploit ============================================================== !/usr/bin/php -q -d shortopentag=on ? printr'...
Exponent CMS <= 0.96.3 (view) Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? printr' .:---------------------------------------------------------------------------:. Exponent CMS 0.96.3 stable possibly other versions "view" arbitrary local inclusion / remote commands xctn exploit by rgod...
Exponent CMS index.php view Parameter Local File Inclusion
The remote host is running Exponent CMS, an open source content management system written in PHP. The version of Exponent CMS installed on the remote host fails to properly sanitize user-supplied input to the 'view' parameter before using it in the 'modules/calendarmodule/class.php' script to...
Exponent CMS 0.96.3 - 'view' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.="...
Design/Logic Flaw
Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors...
Code injection
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."...
CVE-2006-1605
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."...
Directory traversal
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors...
CVE-2006-1606
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors...
Code injection
Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."...
CVE-2006-1604
Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."...
CVE-2006-1607
Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors...
CVE-2006-1605
The CVE-2006-1605 entry concerns Exponent CMS, specifically the image module prior to version 0.96.5 RC 1. It states an unspecified vulnerability that allows remote attackers to execute arbitrary code via unknown vectors involving “parsed PHP.” The connected documents corroborate the affected sof...
CVE-2006-1604
Affected product: Exponent CMS prior to 0.96.5 RC1. The vulnerability is described as an unspecified issue with variables that are not 'typecasted', with unknown impact. NVD records a CVSS v2 base score of 10.0 (HIGH) with network attack vector, requiring no authentication, and affecting confiden...
CVE-2006-1606
CVE-2006-1606 concerns Exponent CMS prior to 0.96.5 RC1. The image module contains an unspecified vulnerability that allows directory disclosure. The only concrete detail from the connected sources is that this affects Exponent CMS’s image module and enables partial disclosure of information, wit...
CVE-2006-1607
CVE-2006-1607 – Exponent CMS : A PHP injection vulnerability exists in the banner module of Exponent CMS prior to 0.96.5 RC1. The issue is triggered via unspecified attack vectors, affecting the banner component and potentially impacting confidentiality, integrity, and availability. The NVD CVSS ...