CVE

Id
25610  
CVE No.
CVE-2007-2253  
Status
Candidate  
Description
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
256002 25610 CVE-2007-2253 MISC:http://www.bugtraq.ir/articles/advisory/exponent_multiple_vulnerabilities/10  View
256003 25610 CVE-2007-2253 OSVDB:38842  View
256004 25610 CVE-2007-2253 URL:http://osvdb.org/38842  View
256005 25610 CVE-2007-2253 OSVDB:38843  View
256006 25610 CVE-2007-2253 URL:http://osvdb.org/38843  View
256007 25610 CVE-2007-2253 XF:exponentcms-multiple-path-disclosure(33937)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53196 JVNDB-2007-001888 Download-Engine における PHP リモートファイルインクルージョンの脆弱性 Download-Engine には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-2255 25610 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001888.html  View