CVE-2005-3764
Published Nov 22, 2005
Last updated 16 years ago
Overview
- Description
- The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09503570-A3FD-4692-87F8-795D2F07ACF8"
},
{
"criteria": "cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03041476-37D5-4DEB-8392-42806DF3DC70"
},
{
"criteria": "cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B44A782D-CEA9-4C60-B855-D6CBEFF68C8E"
},
{
"criteria": "cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86D560E5-82C3-4E4F-8F7A-757BA5F464FE"
},
{
"criteria": "cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8675231-650C-4653-9C8D-7BE79DE83E38"
}
],
"operator": "OR"
}
]
}
]