CVE-2005-4384

medium

Description

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/23822

http://www.osvdb.org/21858

http://www.osvdb.org/21857

http://secunia.com/advisories/18145

http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html

Details

Source: Mitre, NVD

Published: 2005-12-20

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N