Cross-Site Scripting Vulnerabilities in Exponent CMS by Exponent
CVE-2005-0309

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent
Vendor: CVE Published:; 25 January 2005

What is CVE-2005-0309?

Exponent CMS version 0.95 is susceptible to multiple cross-site scripting (XSS) vulnerabilities through the 'module' parameter in 'index.php' and 'mod.php'. This allows remote attackers to inject arbitrary web scripts or HTML, potentially leading to unauthorized actions on behalf of users and information disclosure. Proper validation and sanitization measures must be implemented to mitigate these risks.

References

http://www.osvdb.org/13190

vdb-entryx_refsource_OSVDB

http://www.securityfocus.com/bid/12358

vdb-entryx_refsource_BID

http://marc.info/?l=bugtraq&m=110666998407073&w=2

mailing-listx_refsource_BUGTRAQ

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Feb 10, 2005
Vulnerability published
Jan 25, 2005

CVE-2005-0309 Data

JSON