Unscored CVE-2005-3762 EUVD-2005-3757GHSA-jc86-5gcp-4hv4

SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers t…

Published Nov 22, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.

References

20051119 [security - exponentcms] mailing-list
15389 vdb-entry
21023 vdb-entry
exponent-modules-sql-injection(23109) vdb-entry
17655 third-party-advisory
17505 third-party-advisory