Path Traversal Vulnerability in Exponent CMS by Exponent Software
CVE-2005-3763

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent
Vendor: CVE Published:; 22 November 2005

What is CVE-2005-3763?

Exponent CMS versions 0.96.3 and subsequent versions contain a vulnerability that exposes the full installation path in the base parameter of thumb.php. This flaw enables remote attackers to exploit path traversal techniques, potentially allowing them to retrieve sensitive information stored on the server. Proper validation of parameters and secure coding practices are essential to mitigate this type of vulnerability and safeguard data integrity.

References

http://www.securityfocus.com/archive/1/417218

mailing-listx_refsource_BUGTRAQ

http://secunia.com/advisories/17655

third-party-advisoryx_refsource_SECUNIA

http://secunia.com/advisories/17505

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 22, 2005
Vulnerability Reserved
Nov 22, 2005

CVE-2005-3763 Data

JSON