Description
search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters.
References
- 21825 vdb-entry
- ADV-2005-2981 vdb-entry
- contens-search-path-disclosure(23824) vdb-entry
- http://pridels0.blogspot.com/2005/12/contens-searchcfm-multiple-input.html
- 18143 third-party-advisory