CVE-2005-4575

Published: Dec 29, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message.

Affected (5)

Products: Paperthin: Commonspot Content Server

Paperthin

1 product

Commonspot Content Server

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Paperthin Commonspot Content Server	Up to 4.5
Paperthin Commonspot Content Server	Version 2.5
Paperthin Commonspot Content Server	Version 3.0
Paperthin Commonspot Content Server	Version 3.2
Paperthin Commonspot Content Server	Version 4.0