CVE-2005-3765 Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exponent | = 0.94 | No fix listed |
| exponent | = 0.95 | No fix listed |
| exponent | = 0.96.1 | No fix listed |
| exponent | = 0.96.3 | No fix listed |
| exponent | = 0.96.4 | No fix listed |
References
- 17505 third-party-advisory
- 17655 third-party-advisory vendor-advisory
- 20051119 [security - exponentcms] mailing-list vendor-advisory
- 15503 vdb-entry