| Package | Affected versions | Patched versions |
|---|---|---|
| contens | = 2.5= 3.0 |
search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free