EX
Vendor
Exponent
17
CVEs
0
On KEV
1
New 30D
Products
CM7.3
CMS
Exponent
1 CVEs0 on KEV1 new
EX–
Exponent
Exponent
9 CVEs0 on KEV0 new
EC–
Exponent Cms
Exponent
7 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108900 | CM CMS Exponent | 7.3 | Oct 12 | Exponent CMS XML-RPC xmlrpc.php userLogin sql injection |
| CVE-2007-2253 | EC Exponent Cms Exponent | – | Apr 25 | Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2)… |
| CVE-2007-2252 | EC Exponent Cms Exponent | – | Apr 25 | Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a |
| CVE-2006-4963 | EC Exponent Cms Exponent | – | Sep 23 | Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a |
| CVE-2006-1606 | EC Exponent Cms Exponent | – | Apr 4 | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors |
| CVE-2006-1607 | EC Exponent Cms Exponent | – | Apr 4 | Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors |
| CVE-2006-1604 | EC Exponent Cms Exponent | – | Apr 4 | Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." |
| CVE-2006-1605 | EC Exponent Cms Exponent | – | Apr 4 | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." |
| CVE-2005-3767 | EX Exponent Exponent | – | Nov 22 | Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files |
| CVE-2005-3761 | EX Exponent Exponent | – | Nov 22 | Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms… |
| CVE-2005-3762 | EX Exponent Exponent | – | Nov 22 | SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the… |
| CVE-2005-3763 | EX Exponent Exponent | – | Nov 22 | Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information |
| CVE-2005-3764 | EX Exponent Exponent | – | Nov 22 | The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview… |
| CVE-2005-3765 | EX Exponent Exponent | – | Nov 22 | Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code |
| CVE-2005-3766 | EX Exponent Exponent | – | Nov 22 | Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified,… |
| CVE-2005-0310 | EX Exponent Exponent | – | May 2 | Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) search.info.php, (2) permissions.info.php, (3) security.info.php, (4)… |
| CVE-2005-0309 | EX Exponent Exponent | – | Jan 25 | Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) mod.php in Exponent 0.95 allow remote attackers to inject arbitrary web script or HTML via the module… |