CVE-2005-3762 SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exponent | = 0.94 | No fix listed |
| exponent | = 0.95 | No fix listed |
| exponent | = 0.96.1 | No fix listed |
| exponent | = 0.96.3 | No fix listed |
| exponent | = 0.96.4 | No fix listed |
References
- 17505 third-party-advisory
- 17655 third-party-advisory vendor-advisory
- 21023 vdb-entry
- 20051119 [security - exponentcms] exploit mailing-list vendor-advisory
- 15389 vdb-entry
- exponent-modules-sql-injection(23109) vdb-entry