CVE-2005-3767

Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files.

Date published : 2005-11-22

http://www.securityfocus.com/bid/15391

http://www.securityfocus.com/archive/1/417218