PT-2005-4517 · Exponent · Exponent Cms

Published 2005-11-22 · Updated 2008-09-05 · CVE-2005-3764

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Exponent CMS versions 0.96.3 and later

Description The issue concerns the image gallery component in Exponent CMS, which fails to properly check the MIME type of uploaded files. This could potentially lead to unknown impact from the preview icon, possibly involving injection of HTML.

Recommendations For Exponent CMS versions 0.96.3 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-3764

Affected Products

Exponent Cms

References · 4

• http://secunia.com/advisories/17655 · Vendor Advisory
• http://securityfocus.com/archive/1/417218 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3764 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3764 · Note