本頁列出影響 exponent exponent_cms 的已公開 CVE 漏洞（透過 NVD CPE 關聯）。每列包含嚴重程度評分、摘要與發布日期，便於識別與分析安全議題。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2007-2253 | Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php. | [email protected] | 5.0 | 1.32% | 2007-04-25 | 2026-04-23 |
| CVE-2007-2252 | Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain sensitive information via a .. (dot dot) in the icodir parameter. | [email protected] | 5.0 | 2.76% | 2007-04-25 | 2026-04-23 |
| CVE-2006-4963 | Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files. | [email protected] | 6.4 | 6.94% | 2006-09-23 | 2026-04-16 |
| CVE-2006-1607 | Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors. | [email protected] | 7.5 | 1.46% | 2006-04-04 | 2026-04-16 |
| CVE-2006-1606 | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors. | [email protected] | 5.0 | 1.19% | 2006-04-04 | 2026-04-16 |
| CVE-2006-1605 | Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP." | [email protected] | 7.5 | 2.85% | 2006-04-04 | 2026-04-16 |
| CVE-2006-1604 | Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted." | [email protected] | 10.0 | 1.71% | 2006-04-04 | 2026-04-16 |