Vulnerability Details CVE-2005-3765
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/17505
- http://secunia.com/advisories/17655
- http://www.securityfocus.com/archive/1/417218
- http://www.securityfocus.com/bid/15503
- http://secunia.com/advisories/17505
- http://secunia.com/advisories/17655
- http://www.securityfocus.com/archive/1/417218
- http://www.securityfocus.com/bid/15503
Products affected by CVE-2005-3765
-
cpe:2.3:a:exponent:exponent:0.94
-
cpe:2.3:a:exponent:exponent:0.95
-
cpe:2.3:a:exponent:exponent:0.96.1
-
cpe:2.3:a:exponent:exponent:0.96.3
-
cpe:2.3:a:exponent:exponent:0.96.4