CVE-2005-4389: Contens

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid (1) submit.y, (2) bool, (3) itemsperpage, (4) submit, (5) submit.x, (6) criteria, (7) advanced, and (8) intern parameters.

Affected products

• Contens Contens: version 2.5 only; version 3.0 only

Published 2005-12-20. Last modified 2026-06-16.