CVE:CVE-2005-4384
CNNVD:CNNVD-200512-419
CitySoft Community Enterprise 4.x使得远程攻击者可以通过一个无效的(1) index.cfm的fuseaction参数和(2) document/docWindow.cfm的documentid参数获取服务器完整路径。
solution:Upgrade citysoft community_enterprise to a higher version than 4.x,and avoid the version 4.x