Cross-Site Scripting Vulnerability in Exponent CMS by Exponent
CVE-2005-3761

Currently unrated

Key Information:

Vendor

Exponent

Status
Exponent
Vendor
CVE Published:
22 November 2005

What is CVE-2005-3761?

A cross-site scripting (XSS) vulnerability exists in Exponent CMS versions 0.96.3 and subsequent releases, enabling remote attackers to inject arbitrary web scripts or HTML content. This weakness can be exploited via JavaScript payloads in forms generated by the CMS’s form generator or through manipulation of installer parameters, potentially compromising user data and site integrity.

References

http://www.securityfocus.com/archive/1/417218
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/17655
third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/17505
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.