← Database

CVE-2005-4389

MEDIUM CVSS: 5.0 Published: 2005-12-20 Modified: 2026-06-16

Description

search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters.

Affected Platforms

Contens Contens

Weakness Type

NVD-CWE-Other

References