CVE-2005-3766

CVE-2005-3766 affects Exponent CMS 0.96.3 and later; sensitive user pages are stored under the web document root with insufficient access control, allowing access by browsing uploaded files. Impact: potential information disclosure. No remediation details provided in the supplied documents.