Oicgroup Exponent Cms vulnerabilities
3 known vulnerabilities affecting oicgroup/exponent_cms.
Total CVEs
3
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2007-2337P4MEDIUMCVSS 4.3PoC≤ 0.96.6v0.94+5 more2007-04-27
CVE-2007-2337 [MEDIUM] CWE-79 CVE-2007-2337: Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow r
Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) magpie_debug.php and (b) magpie_simple.php in external/magpierss/scripts/, the (2) rss_url parameter to (c) magpie_slashbox.php in external/magpierss/scripts/, and th
nvd
CVE-2008-1972P4MEDIUMCVSS 4.3≤ 0.96.6-ga20071003v0.94+6 more2008-04-27
CVE-2008-1972 [MEDIUM] CWE-79 CVE-2008-1972: Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent
Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields. NOTE: some o
nvd
CVE-2009-4744P4MEDIUMCVSS 4.3v0.97-ga200902132010-03-26
CVE-2009-4744 [MEDIUM] CWE-79 CVE-2009-4744: Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allow
Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
nvd