Description
Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files.
References
- 15391 vdb-entry
- 20051119 [security - exponentcms] mailing-list
- exponent-image-code-execution(23113) vdb-entry
- 17655 third-party-advisory
- 17505 third-party-advisory