Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

paperthin commonspot content server vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2014-2859
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to bypass intended access restrictions via a direct request.
Paperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.0Paperthin Commonspot Content Server
4.3
CVSSv2
CVE-2014-2860
Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allow remote malicious users to inject arbitrary web script or HTML via a crafted HTTP request to a (1) ColdFusion or (2) JavaScript component.
Paperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.0Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.1
6.5
CVSSv2
CVE-2014-2862
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown vectors.
Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.0
10
CVSSv2
CVE-2014-2863
Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allow remote malicious users to have an unspecified impact via a full pathname in a parameter.
Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.0
10
CVSSv2
CVE-2014-2864
Multiple directory traversal vulnerabilities in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allow remote malicious users to have an unspecified impact via a filename parameter containing directory traversal sequences.
Paperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.0Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.1
7.5
CVSSv2
CVE-2014-2865
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion...
Paperthin Commonspot Content Server 8.0.0Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1
10
CVSSv2
CVE-2014-2866
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 relies on client JavaScript code for access restrictions, which allows remote malicious users to perform unspecified operations by modifying this code.
Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.0
10
CVSSv2
CVE-2014-2867
Unrestricted file upload vulnerability in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
Paperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.0Paperthin Commonspot Content Server
7.5
CVSSv2
CVE-2014-2868
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.
Paperthin Commonspot Content ServerPaperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.0
5
CVSSv2
CVE-2014-2869
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address, and IP address information.
Paperthin Commonspot Content Server 8.0.2Paperthin Commonspot Content Server 8.0.1Paperthin Commonspot Content Server 8.0.0Paperthin Commonspot Content Server
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypassCVE-2024-30051remoteCVE-2024-27954CVE-2023-51483CVE-2023-47782SSRFCVE-2024-24715CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook