MIME Type Validation Issue in Exponent CMS Image Gallery Component
CVE-2005-3764

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent
Vendor: CVE Published:; 22 November 2005

What is CVE-2005-3764?

The image gallery component of Exponent CMS versions 0.96.3 and newer fails to adequately validate the MIME type of uploaded files. This oversight allows potential attackers to upload malicious files, which can lead to HTML content injection through the preview icon feature. Such vulnerabilities can have far-reaching implications on the security posture of web applications, permitting unauthorized actions or exploits due to improperly handled file types.

References

http://www.securityfocus.com/archive/1/417218

mailing-listx_refsource_BUGTRAQ

http://secunia.com/advisories/17655

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Nov 22, 2005

CVE-2005-3764 Data

JSON