| |
Vulnerability CVE-2005-4389
Published: 2005-12-19 Modified: 2012-02-12
| Description: |
search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters. |
CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
5/10 |
2.9/10 |
10/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
None |
None |
References: |
http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html
http://www.vupen.com/english/advisories/2005/2981
https://exchange.xforce.ibmcloud.com/vulnerabilities/23824
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
