Unrated severityNVD Advisory· Published Nov 22, 2005· Updated Jun 16, 2026
CVE-2005-3762
CVE-2005-3762
Description
SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Affected products
6cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*
- (no CPE)range: >=0.96.3
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/archive/1/417218nvdExploitVendor Advisory
- secunia.com/advisories/17655nvdVendor Advisory
- secunia.com/advisories/17505nvd
- www.osvdb.org/21023nvd
- www.securityfocus.com/bid/15389nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/23109nvd
News mentions
0No linked articles in our index yet.