CVE-2005-3763

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-22 · updated 2026-06-16

Description

Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information. NOTE: this might be resultant from an absolute path traversal vulnerability.

Affected products

Exponent: 0.94, 0.95, 0.96.1, 0.96.3, 0.96.4

References

http://secunia.com/advisories/17505
http://secunia.com/advisories/17655
http://www.securityfocus.com/archive/1/417218
http://secunia.com/advisories/17505
http://secunia.com/advisories/17655
http://www.securityfocus.com/archive/1/417218

Get alerted when CVE-2005-3763 or the next vulnerability affects your stack