PatchTheCVEexponent vulnerabilities and fixes
Recent CVEs affecting exponent, with upgrade or downgrade steps. 9 tracked.
exponent has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-11-22. Highest priority: CVE-2005-3764 (score 53/100).
- CVE-2005-3767 MEDIUM 5.0 DOWNGRADE Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows re
- CVE-2005-3766 MEDIUM 5.0 DOWNGRADE Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficie
- CVE-2005-3765 HIGH 7.5 DOWNGRADE Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, wh
- CVE-2005-3764 HIGH 10.0 DOWNGRADE The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check t
- CVE-2005-3763 MEDIUM 5.0 DOWNGRADE Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php,
- CVE-2005-3762 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versi
- CVE-2005-3761 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to
- CVE-2005-0310 MEDIUM 5.0 DOWNGRADE Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.
- CVE-2005-0309 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow rem
FAQ
How do I fix exponent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is exponent being exploited right now?
None of the tracked exponent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which exponent CVE should I patch first?
CVE-2005-3764 currently ranks highest (53/100): The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check t.