PatchTheCVEexponent vulnerabilities
Recent CVEs affecting exponent products. 16 tracked.
exponent has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-04-25. Highest priority: CVE-2006-1604 (score 54/100).
- CVE-2007-2253 MEDIUM 5.0 UPGRADE Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request
- CVE-2007-2252 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote att
- CVE-2006-4963 MEDIUM 6.4 DOWNGRADE Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and exec
- CVE-2006-1607 HIGH 7.5 DOWNGRADE Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via u
- CVE-2006-1606 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure"
- CVE-2006-1605 HIGH 7.5 DOWNGRADE Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to ex
- CVE-2006-1604 HIGH 10.0 DOWNGRADE Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors rela
- CVE-2005-3767 MEDIUM 5.0 DOWNGRADE Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows re
- CVE-2005-3766 MEDIUM 5.0 DOWNGRADE Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficie
- CVE-2005-3765 HIGH 7.5 DOWNGRADE Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, wh
- CVE-2005-3764 HIGH 10.0 DOWNGRADE The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check t
- CVE-2005-3763 MEDIUM 5.0 DOWNGRADE Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php,
- CVE-2005-3762 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versi
- CVE-2005-3761 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to
- CVE-2005-0310 MEDIUM 5.0 DOWNGRADE Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.
- CVE-2005-0309 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow rem
FAQ
How do I fix exponent vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is exponent being exploited right now?
None of the tracked exponent CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which exponent CVE should I patch first?
CVE-2006-1604 currently ranks highest (54/100): Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors rela.