Unrated severityNVD Advisory· Published Nov 22, 2005· Updated Apr 16, 2026
CVE-2005-3766
CVE-2005-3766
Description
Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers to access the pages by browsing uploaded files.
Affected products
5cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:exponent:exponent:0.94:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.95:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.96.1:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.96.3:*:*:*:*:*:*:*
- cpe:2.3:a:exponent:exponent:0.96.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- secunia.com/advisories/17655nvdVendor Advisory
- www.securityfocus.com/archive/1/417218nvdVendor Advisory
- secunia.com/advisories/17505nvd
News mentions
0No linked articles in our index yet.