CVE-2005-4384

Published: Dec 20, 2005Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.

Affected (1)

Products: Citysoft: Community Enterprise

Citysoft

1 product

Community Enterprise

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Citysoft Community Enterprise	Version 4.x

References (10)

http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html

Source: cve@mitre.org

http://secunia.com/advisories/18145

Source: cve@mitre.org

http://www.osvdb.org/21857

Source: cve@mitre.org

http://www.osvdb.org/21858

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23822

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html