SQL Injection Vulnerability in Exponent CMS by Exponent
CVE-2005-3762

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent
Vendor: CVE Published:; 22 November 2005

What is CVE-2005-3762?

An SQL injection vulnerability exists in the navigation module of Exponent CMS, specifically in version 0.96.3 and later. This flaw allows remote attackers to manipulate SQL queries by injecting arbitrary SQL commands through the parent parameter. By exploiting this vulnerability, attackers could potentially gain access to sensitive data or alter database content, posing significant risks to the integrity and confidentiality of the affected systems. It emphasizes the importance of securing input parameters and implementing robust validation mechanisms to mitigate such vulnerabilities.

References

http://www.securityfocus.com/archive/1/417218

mailing-listx_refsource_BUGTRAQ

http://www.securityfocus.com/bid/15389

vdb-entryx_refsource_BID

http://www.osvdb.org/21023

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 22, 2005
Vulnerability Reserved
Nov 22, 2005

CVE-2005-3762 Data

JSON