CVE-2006-4963

Exponent CMS 0.96.3 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-4963. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets Exponent CMS 0.96.3 by leveraging arbitrary local file inclusion and remote command execution via session file manipulation. It bypasses magic_quotes_gpc and injects a malicious payload through the CLIENT-IP header.

Description

Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.

Exploits (1)

exploitdb WORKING POC VERIFIED
by rgod · phpwebappsphp
https://www.exploit-db.com/exploits/2391

This exploit targets Exponent CMS 0.96.3 by leveraging arbitrary local file inclusion and remote command execution via session file manipulation. It bypasses magic_quotes_gpc and injects a malicious payload through the CLIENT-IP header.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Exponent CMS 0.96.3 (possibly other versions)
No auth needed
Prerequisites: PHP environment with fsockopen enabled · Target running Exponent CMS 0.96.3 · Access to the target's web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/29024
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/2391
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/3708
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/29077
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/20111
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/22003

Scores

EPSS 0.0694
EPSS Percentile 93.3%

Details

Status published
Products (1)
exponent/exponent_cms 0.96.3
Published Sep 23, 2006
Tracked Since Feb 18, 2026