CVE-2005-3767

概要

参考情報

• secunia.com/advisories/17505
• secunia.com/advisories/17655 · Vendor Advisory
• securityfocus.com/archive/1/417218 · Vendor Advisory
• securityfocus.com/bid/15391
• exchange.xforce.ibmcloud.com/vulnerabilities/23113

exponent のその他の脆弱性

• CVE-2005-3766中 5.0Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though …
• CVE-2005-3765高 7.5Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to…
• CVE-2005-3764緊急 10.0The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files…
• CVE-2005-3763中 5.0Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers…
• CVE-2005-3762高 7.5SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to…