Directory Traversal Vulnerability in Exponent CMS by Exponent
CVE-2007-2252

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent Cms
Vendor: CVE Published:; 25 April 2007

What is CVE-2007-2252?

The directory traversal vulnerability in the iconspopup.php file of Exponent CMS versions up to 0.96.6 Alpha allows remote attackers to exploit the icodir parameter. By including '..' sequences in the request, they can traverse the directory structure and access sensitive files on the server, posing significant risks of information leakage.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/33936

vdb-entryx_refsource_XF

http://www.securityfocus.com/bid/23574

vdb-entryx_refsource_BID

http://www.bugtraq.ir/articles/advisory/exponent_multiple...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 25, 2007
Vulnerability Reserved
Apr 25, 2007

CVE-2007-2252 Data

JSON