| Package | Affected versions | Patched versions |
|---|---|---|
| exponent | = 0.94= 0.95= 0.96.1= 0.96.3= 0.96.4 |
Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information. NOTE: this might be resultant from an absolute path traversal vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free