| Package | Affected versions | Patched versions |
|---|---|---|
| community enterprise | = 4.x |
CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid (1) fuseaction parameter to index.cfm and (2) documentid parameter to document/docWindow.cfm.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free