CVE-2005-3764

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-11-22 · updated 2026-06-16

Description

The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.

Affected products

Exponent: 0.94, 0.95, 0.96.1, 0.96.3, 0.96.4

References

http://secunia.com/advisories/17655
http://www.securityfocus.com/archive/1/417218
http://secunia.com/advisories/17655
http://www.securityfocus.com/archive/1/417218

Get alerted when CVE-2005-3764 or the next vulnerability affects your stack