Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Exponent CMS 'index.php'目录遍历漏洞
Vulnerability Description
Exponent CMS的index.php中的目录遍历漏洞，远程攻击者可以通过calendarmodule模块的show_view操作中view参数（该参数中包含..）序列读取和执行任意本地文件，如通过会话文件执行PHP代码所示。
CVSS Information
N/A
Vulnerability Type
N/A