Path Disclosure Vulnerability in Exponent CMS by Exponent Web Technologies
CVE-2007-2253

Currently unrated

Key Information:

Vendor

Exponent

Status
Exponent Cms
Vendor
CVE Published:
25 April 2007

What is CVE-2007-2253?

Exponent CMS versions up to 0.96.6 Alpha are susceptible to a path disclosure vulnerability. This flaw allows remote attackers to gain access to sensitive path information through direct requests to specific PHP files within the SDK directory. The exploited files, such as formcontrol.php and file_modules.php, can reveal critical server path information, potentially leading to further vulnerabilities and exploits.

References

http://osvdb.org/38842
vdb-entryx_refsource_OSVDB
http://www.bugtraq.ir/articles/advisory/exponent_multiple...
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/33937
vdb-entryx_refsource_XF

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.