| Package | Affected versions | Patched versions |
|---|---|---|
| commonspot content server | = 2.5= 3.0= 3.2= 4.0≤ 4.5 |
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free