CVE-2005-3764 The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involv...
HighCVSS 10.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exponent | = 0.94 | No fix listed |
| exponent | = 0.95 | No fix listed |
| exponent | = 0.96.1 | No fix listed |
| exponent | = 0.96.3 | No fix listed |
| exponent | = 0.96.4 | No fix listed |
References
- 17655 third-party-advisory vendor-advisory
- 20051119 [security - exponentcms] mailing-list vendor-advisory