CVE-2005-3763: Exponent

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information. NOTE: this might be resultant from an absolute path traversal vulnerability.

Affected products

• Exponent Exponent: version 0.94 only; version 0.95 only; version 0.96.1 only; version 0.96.3 only; version 0.96.4 only

Published 2005-11-22. Last modified 2026-06-16.