← Database

CVE-2005-4384

MEDIUM CVSS: 6.4 Published: 2005-12-20 Modified: 2026-06-16

Description

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.

Affected Platforms

Citysoft Community Enterprise

Weakness Type

NVD-CWE-Other

References