Remote Code Execution Vulnerability in Exponent CMS by Exponent Solutions
CVE-2006-1605

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent Cms
Vendor: CVE Published:; 4 April 2006

What is CVE-2006-1605?

A vulnerability exists in the image module of Exponent CMS before version 0.96.5 RC 1, allowing remote attackers to exploit parsed PHP code execution. This vulnerability can enable attackers to execute arbitrary commands, potentially compromising the integrity and security of the system. Proper validation and security measures are critical to mitigate such risks.

References

http://www.vupen.com/english/advisories/2006/1201

vdb-entryx_refsource_VUPEN

http://secunia.com/advisories/19498

third-party-advisoryx_refsource_SECUNIA

http://www.osvdb.org/24358

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 4, 2006
Vulnerability Reserved
Apr 3, 2006

CVE-2006-1605 Data

JSON