CVE-2005-3763 Information

Description

Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php which allows remote attackers to obtain sensitive information. NOTE: this might be resultant from an absolute path traversal vulnerability.

Reference

http://secunia.com/advisories/17505 http://secunia.com/advisories/17655 http://www.securityfocus.com/archive/1/417218