CVE-2005-3767

Description

Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23113

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-3762

http://www.securityfocus.com/bid/15391

http://www.securityfocus.com/archive/1/417218

http://secunia.com/advisories/17655

http://secunia.com/advisories/17505

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS