CVE-2005-3764

CRITICAL 10.0CVE-2005-3764 · Published 22/11/2005 · updated 16/06/2026

In short

CVE-2005-3764 is a CRITICAL (CVSS 10.0) vulnerability affecting exponent (exponent).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
exponent exponent	`= 0.94= 0.95= 0.96.1= 0.96.3= 0.96.4`	No fix yet

Description

The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.

References

secunia.com/advisories/17655 · Vendor Advisory
securityfocus.com/archive/1/417218 · Vendor Advisory

More vulnerabilities in exponent

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free