Community Enterprise Security Vulnerabilities and Issues — Community Enterprise CVE List

Lucene search

CitysoftCommunity Enterprise

3 matches found

CVE•added 2005/12/20 2:3 a.m.•38 views

CVE-2005-4383

Cross-site scripting (XSS) vulnerability in index.cfm in CitySoft Community Enterprise 4.x allows remote attackers to inject arbitrary web script or HTML via the (1) presentationSite, (2) docPublishYear, (3) docDescription, (4) publishState, (5) docAuthor, (6) docTitle, (7) subTopic, (8) topic, (9)...

4.3CVSS6AI score0.00427EPSS

CVE•added 2005/12/20 2:3 a.m.•33 views

CVE-2005-4382

SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the (1) nodeID, (2) pageID, (3) ID, and (4) parentid parameter to index.cfm; and (5) documentFormatId parameter to document/docWindow.cfm.

7.5CVSS8.8AI score0.00816EPSS

CVE•added 2005/12/20 2:3 a.m.•30 views

CVE-2005-4384

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.

6.4CVSS7AI score0.00483EPSS