Vulnerabilities > CVE-2007-2252 - Input Validation vulnerability in Exponent CMS 0.96.5Rc1/0.96.6Alpha

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
exponent
exploit available
NVD
Published: 2007-04-25
Updated: 2017-07-29

Summary

Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter.

Vulnerable Configurations

Part Description Count
Application
Exponent
2

Exploit-Db

descriptionExponent CMS 0.96.5/ 0.96.6 iconspopup.php icodir Variable Traversal Arbitrary Directory Listing. CVE-2007-2252. Webapps exploit for php platform
idEDB-ID:29872
last seen2016-02-03
modified2007-04-20
published2007-04-20
reporterHamid Ebadi
sourcehttps://www.exploit-db.com/download/29872/
titleExponent CMS 0.96.5/ 0.96.6 iconspopup.php icodir Variable Traversal Arbitrary Directory Listing

References