medium5.0
CVE-2005-4575
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a…
Impact
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paperthin | Commonspot Content Server | through 4.5 Versions 2.5, 3.0, 3.2, 4.0 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html
- http://secunia.com/advisories/18257
- http://www.osvdb.org/21932
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23865
- http://pridels0.blogspot.com/2005/12/commonspot-content-server-vuln.html
- http://secunia.com/advisories/18257
- http://www.osvdb.org/21932
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23865