CVE-2005-4389

Published: Dec 20, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters.

Affected (2)

Products: Contens: Contens

Contens

1 product

Contens

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Contens Contens	Version 2.5
Contens Contens	Version 3.0

References (10)

http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html

Source: cve@mitre.org

http://secunia.com/advisories/18143

Source: cve@mitre.org

http://www.osvdb.org/21825

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2005/2981

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/23824

Source: cve@mitre.org

http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html