CVE-2006-1606: Exponent CMS

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors.

Affected products

• Exponent Exponent CMS: version 0.94 only; version 0.95 only; version 0.96.1 only; version 0.96.4 only

Published 2006-04-04. Last modified 2026-06-16.