CVEvulnerability
CVE-2005-3764
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-11-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.
Affected configurations
• exponent exponent 0.94
• exponent exponent 0.95
• exponent exponent 0.96.1
• exponent exponent 0.96.3
• exponent exponent 0.96.4
References
- http://secunia.com/advisories/17655 Vendor Advisory
- http://www.securityfocus.com/archive/1/417218 Vendor Advisory
- http://secunia.com/advisories/17655 Vendor Advisory
- http://www.securityfocus.com/archive/1/417218 Vendor Advisory