coldfusion.fixes.txt

Date: Mon, 24 May 1999 15:00:52 -0700 From: [email protected] To: [email protected] Subject: New Allaire Security Zone Bulletins and KB Articles Dear ColdFusion Customer- Several new security issues that may affect ColdFusion customers have come to our attention recently. Please visit the...

ms.odbc.coldfusion.txt

Date: Tue, 1 Jun 1999 11:45:35 -0700 From: [email protected] To: [email protected] Subject: New Allaire Security Bulletin ASB99-09 Dear Allaire Customer -- We have recently become aware of a serious security vulnerability that may affect customers using Microsoft Access with ColdFusion...

coldfusion.alert.txt

Date: Friday, 30 Apr 1999 17:00:00 -0400 From: [email protected] To: [email protected] Subject: ColdFusion Security Alert Allaire respects the Web and the privacy of those who use it. To avoid future messages from Allaire, send e-mail to [email protected] with the subject:...

ColdFusion Multiple Vulnerabilities (File Upload/Manipulation)

The 'exprcalc.cfm' page in the version of Cold Fusion Application Server running on the remote host allows an unauthenticated, remote attacker to read arbitrary files and possibly delete or upload arbitrary files as well. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Allaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution

source: https://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To upload files to the sever first find out the location of the sample code on the...

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution

Allaire ColdFusion Server 4.0 - Remote File Display Deletion Upload Execution source: https://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To...

Allaire ColdFusion Server 4.0.1 - CFCRYPT.EXE Decrypt Pages

Allaire ColdFusion Server 4.0.1 - CFCRYPT.EXE Decrypt Pages / source: https://www.securityfocus.com/bid/275/info A vulnerability in ColdFusion allows pages encrypted with the CFCRYPT.EXE utility to be decrypted. ColdFusion supports the ability to "encrypt" the CFML templates in an application or...

Allaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt Pages

/ source: https://www.securityfocus.com/bid/275/info A vulnerability in ColdFusion allows pages encrypted with the CFCRYPT.EXE utility to be decrypted. ColdFusion supports the ability to "encrypt" the CFML templates in an application or component, using the CFCRYPT.EXE utility, so they can be...