Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
paperthin commonspot content server vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2005-4574
Cross-site scripting (XSS) vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the bNewWindow parameter.
Paperthin Commonspot Content Server 2.5
Paperthin Commonspot Content Server 3.0
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 3.2
Paperthin Commonspot Content Server 4.0
1 EDB exploit
5
CVSSv2
CVE-2005-4575
PaperThin CommonSpot Content Server 4.5 and previous versions allow remote malicious users to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message.
Paperthin Commonspot Content Server 3.2
Paperthin Commonspot Content Server 4.0
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 2.5
Paperthin Commonspot Content Server 3.0
7.5
CVSSv2
CVE-2014-2859
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to bypass intended access restrictions via a direct request.
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
Paperthin Commonspot Content Server
10
CVSSv2
CVE-2014-2863
Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allow remote malicious users to have an unspecified impact via a full pathname in a parameter.
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
10
CVSSv2
CVE-2014-2864
Multiple directory traversal vulnerabilities in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allow remote malicious users to have an unspecified impact via a filename parameter containing directory traversal sequences.
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.0
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 8.0.1
10
CVSSv2
CVE-2014-2867
Unrestricted file upload vulnerability in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to execute arbitrary code by uploading a ColdFusion page, and then accessing it via unspecified vectors.
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
Paperthin Commonspot Content Server
5
CVSSv2
CVE-2014-2869
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to obtain sensitive information via requests to unspecified URIs, as demonstrated by pathname, SQL server, e-mail address, and IP address information.
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
Paperthin Commonspot Content Server
5
CVSSv2
CVE-2014-2871
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote malicious users to obtain sensitive information by sniffing the network.
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
5
CVSSv2
CVE-2014-2873
PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 does not require authentication for access to log files, which allows remote malicious users to obtain sensitive server information by using a predictable name in a request for a file.
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
4.3
CVSSv2
CVE-2014-2861
Incomplete blacklist vulnerability in PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to conduct cross-site scripting (XSS) attacks via a crafted string, as demonstrated by bypassing a protection mechanism that removes only the "alert...
Paperthin Commonspot Content Server
Paperthin Commonspot Content Server 8.0.2
Paperthin Commonspot Content Server 8.0.1
Paperthin Commonspot Content Server 8.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »