CVE-2005-3762

概要

参考情報

• secunia.com/advisories/17505
• secunia.com/advisories/17655 · Vendor Advisory
• osvdb.org/21023
• securityfocus.com/archive/1/417218 · Exploit
• securityfocus.com/bid/15389
• exchange.xforce.ibmcloud.com/vulnerabilities/23109

exponent のその他の脆弱性

• CVE-2005-3767中 5.0Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and e…
• CVE-2005-3766中 5.0Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though …
• CVE-2005-3765高 7.5Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to…
• CVE-2005-3764緊急 10.0The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files…
• CVE-2005-3763中 5.0Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers…