Дырки в ColdFusion (file access)

Уязвимости в демонстрационных приложениях...

CVE-2001-1120

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to 1 read or delete arbitrary files, or 2 overwrite ColdFusion Server templates...

DoS против ColdFusion

При превышении максимального числа одновременных обращений к кэшированной странице сервера сервер перестанет отвечать на запросы клиента...

coldfusion.alert.txt

Date: Friday, 30 Apr 1999 17:00:00 -0400 From: [email protected] To: [email protected] Subject: ColdFusion Security Alert Allaire respects the Web and the privacy of those who use it. To avoid future messages from Allaire, send e-mail to [email protected] with the subject:...

ColdFusion Multiple Vulnerabilities (File Upload/Manipulation)

The 'exprcalc.cfm' page in the version of Cold Fusion Application Server running on the remote host allows an unauthenticated, remote attacker to read arbitrary files and possibly delete or upload arbitrary files as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...