Vulnerabilities > CVE-2007-2252 - Unspecified vulnerability in Exponent CMS 0.96.5Rc1/0.96.6Alpha

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
exponent
exploit available
NVD
Published: 2007-04-25
Updated: 2024-11-21

Summary

Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.

Vulnerable Configurations

Part Description Count
Application
Exponent
2

Exploit-Db

descriptionExponent CMS 0.96.5/ 0.96.6 iconspopup.php icodir Variable Traversal Arbitrary Directory Listing. CVE-2007-2252. Webapps exploit for php platform
idEDB-ID:29872
last seen2016-02-03
modified2007-04-20
published2007-04-20
reporterHamid Ebadi
sourcehttps://www.exploit-db.com/download/29872/
titleExponent CMS 0.96.5/ 0.96.6 iconspopup.php icodir Variable Traversal Arbitrary Directory Listing

References