Community Enterprise@4.x Security Vulnerabilities and Issues — Community Enterprise@4.x CVE List

Lucene search

CitysoftCommunity Enterprise4.x

2 matches found

CVE•added 2005/12/20 2:3 a.m.•38 views

CVE-2005-4383

Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishYear, (3) docDescription, (4) publishState, (5) docAuthor, (6) docTitle, (7) subTopic, (8) topic, (9)...

4.3CVSS6AI score0.00427EPSS

CVE•added 2005/12/20 2:3 a.m.•30 views

CVE-2005-4384

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.

6.4CVSS7AI score0.00483EPSS