What’s Vulnerable › Vulnerabilities

CVE-2006-1607

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-04-04 · updated 2026-06-16

Description

Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors.

Affected products

• Exponent Cms: 0.94, 0.95, 0.96.1, 0.96.4

References

• http://secunia.com/advisories/19498
• http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524
• http://www.osvdb.org/24358
• http://www.securityfocus.com/bid/17357
• http://www.vupen.com/english/advisories/2006/1201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25610
• http://secunia.com/advisories/19498
• http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524
• http://www.osvdb.org/24358
• http://www.securityfocus.com/bid/17357
• http://www.vupen.com/english/advisories/2006/1201
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25610

Get alerted when CVE-2006-1607 or the next vulnerability affects your stack