File Upload Vulnerability in Exponent CMS by Exponent Software
CVE-2005-3767

Currently unrated

Key Information:

Vendor: Exponent
Status: Exponent
Vendor: CVE Published:; 22 November 2005

What is CVE-2005-3767?

Exponent CMS versions 0.96.3 and above have a serious flaw that fails to adequately restrict the types of files that can be uploaded. This vulnerability allows remote attackers to upload malicious PHP files, which can then be executed on the server. Exploitation of this weakness could lead to full control over the affected system, posing significant risks to data integrity and confidentiality.

References

http://www.securityfocus.com/bid/15391

vdb-entryx_refsource_BID

http://www.securityfocus.com/archive/1/417218

mailing-listx_refsource_BUGTRAQ

https://exchange.xforce.ibmcloud.com/vulnerabilities/23113

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 22, 2005
Vulnerability Reserved
Nov 22, 2005

CVE-2005-3767 Data

JSON