Security Advisory
CVE-2005-3765
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.