Exponent: >> Exponent Cms >> 0.96.3 Security Vulnerabilities
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.
CVSS Score
6.4
EPSS Score
0.099
Published
2006-09-23