Skip to content
Exponent vulnerabilities
Newest
-
exponent cms
Exponent CMS XML-RPC xmlrpc.php userLogin sql injection
CVE-2026-108900
6.9 Medium
-
exponent cms
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a...
CVE-2007-2253
5.0 Medium
-
exponent cms
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier...
CVE-2007-2252
Public exploit
5.0 Medium
-
exponent cms
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to...
CVE-2006-4963
Public exploit
6.4 Medium
-
exponent cms
Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php...
CVE-2006-1607
7.5 High
-
exponent cms
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows ...
CVE-2006-1606
5.0 Medium
-
exponent cms
Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote...
CVE-2006-1605
7.5 High
-
exponent cms
Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack...
CVE-2006-1604
10.0 High
-
exponent
Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files,...
CVE-2005-3767
5.0 Medium
-
exponent
Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root...
CVE-2005-3766
5.0 Medium
-
exponent
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute...
CVE-2005-3765
7.5 High
-
exponent
The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not...
CVE-2005-3764
10.0 High
-
exponent
Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter...
CVE-2005-3763
5.0 Medium
-
exponent
SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3...
CVE-2005-3762
7.5 High
-
exponent
Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote...
CVE-2005-3761
4.3 Medium
-
exponent
Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request...
CVE-2005-0310
5.0 Medium
-
exponent
Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0...
CVE-2005-0309
4.3 Medium