PT-2005-4517 · Exponent · Exponent Cms

Publicado 2005-11-22 · Atualizado 2008-09-05 · CVE-2005-3764

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Exponent CMS versions 0.96.3 and later

Description The issue concerns the image gallery component in Exponent CMS, which fails to properly check the MIME type of uploaded files. This could potentially lead to unknown impact from the preview icon, possibly involving injection of HTML.

Recommendations For Exponent CMS versions 0.96.3 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-3764

Produtos afetados

Exponent Cms

Referências · 4

• http://secunia.com/advisories/17655 · Aviso do Fabricante
• http://securityfocus.com/archive/1/417218 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-3764 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3764 · Nota