Access Control Vulnerability in Exponent CMS by Exponent Software
CVE-2005-3766

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent
Vendor: CVE Published:; 22 November 2005

What is CVE-2005-3766?

Exponent CMS versions 0.96.3 and later exhibit a significant security flaw whereby sensitive user pages are stored beneath the web document root without appropriate access controls. Despite implemented permission settings, this oversight allows attackers to exploit the system, gaining unauthorized access to user data by simply browsing uploaded files. This vulnerability poses a serious risk, enabling potential data breaches and unauthorized exposure of sensitive information.

References

http://www.securityfocus.com/archive/1/417218

mailing-listx_refsource_BUGTRAQ

http://secunia.com/advisories/17655

third-party-advisoryx_refsource_SECUNIA

http://secunia.com/advisories/17505

third-party-advisoryx_refsource_SECUNIA

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 22, 2005
Vulnerability Reserved
Nov 22, 2005

CVE-2005-3766 Data

JSON