CyberSec.Space Logo
CVEブラウザに戻る

CVE-2006-1604

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1030%
EPSS Percentile28.31th
Published2006年4月4日
Last Modified2026年4月16日

Vulnerability Description

Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."

Affected Platforms (CPE)

📦
Exponent

Exponent Cms

= 0.94
📦
Exponent

Exponent Cms

= 0.95
📦
Exponent

Exponent Cms

= 0.96.1
📦
Exponent

Exponent Cms

= 0.96.4

References & Advisories

🔗 http://secunia.com/advisories/19498
🔗 http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524
🔗 http://www.securityfocus.com/bid/17357
🔗 http://www.vupen.com/english/advisories/2006/1201
🔗 http://secunia.com/advisories/19498
🔗 http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524
🔗 http://www.securityfocus.com/bid/17357
🔗 http://www.vupen.com/english/advisories/2006/1201

関連する脆弱性情報

CVE-2005-376410.0

The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uplo...

CVE-2016-70959.8

Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in ...

CVE-2016-94819.8

In framework/modules/core/controllers/expCommentController.php of Exponent CMS 2.4.0, content_id input is passed into showComments...

CVE-2016-74539.8

The Pixidou Image Editor in Exponent CMS prior to v2.3.9 patch 2 could be used to perform an fid SQL Injection.