CVE-2007-2253 Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exponent cms | <= 0.96.6_alpha | No fix listed |
References
- 38842 vdb-entry
- 38843 vdb-entry
- www.bugtraq.ir exploit vendor-advisory
- exponentcms-multiple-path-disclosure(33937) vdb-entry