What’s Vulnerable › Vulnerabilities

CVE-2005-4384

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-12-20 · updated 2026-06-16

Description

CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.

Affected products

• Citysoft Community Enterprise: 4.x

References

• http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html
• http://secunia.com/advisories/18145
• http://www.osvdb.org/21857
• http://www.osvdb.org/21858
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23822
• http://pridels0.blogspot.com/2005/12/community-enterprise-4x-multiple-vuln.html
• http://secunia.com/advisories/18145
• http://www.osvdb.org/21857
• http://www.osvdb.org/21858
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23822

Get alerted when CVE-2005-4384 or the next vulnerability affects your stack