VYPR
Unrated severityNVD Advisory· Published Nov 22, 2005· Updated Apr 16, 2026

CVE-2005-3762

CVE-2005-3762

Description

SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.

Affected products

5
  • Exponent/Exponent5 versions
    cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*
    • cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*
    • cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*
    • cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*
    • cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.