Code injection

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors...

CVE-2013-1387

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors...

CVE-2013-1388

CVE-2013-1388 affects Adobe ColdFusion 9.0 (before Update 10), 9.0.1 (before Update 9), 9.0.2 (before Update 4), and 10 (before Update 9). The vulnerability allows an attacker to obtain access to the administrator console via unknown vectors. Public sources consistently describe an unspecified vu...

CVE-2013-1387

Adobe ColdFusion is affected by multiple vulnerabilities addressed in APSB13-10 (CVE-2013-1387 and CVE-2013-1388). Affected products include ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9. For CVE-2013-1387, an unspecified user impersonation ...

CVE-2013-1388

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

Adobe Releases Security Update for ColdFusion

Adobe has released a security hotfix for Adobe ColdFusion 10, 9.0.2, 9.0.1 and 9.0 for Windows, Macintosh and UNIX to address multiple vulnerabilities. These vulnerabilities could allow an unauthorized user to bypass authentication controls. US-CERT recommends that users and administrators review...

Adobe ColdFusion APSB13-03 Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...

Adobe ColdFusion APSB13-03 Remote Exploit

Exploit for multiple platform in category remote exploits require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit3 'Adobe ColdFusion APSB13-03', 'Description' = %q This module exploits a pile of vulnerabilities in Adobe ColdFusion APSB13-03: CVE-2013-0625: arbitrary command...

Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...

Adobe Ships Fixes for Flash, ColdFusion and Shockwave in April Patch Release

Adobe published its monthly security bulletins today, pushing out updates that address issues in the company’s ColdFusion platform as well as its Flash and Shockwave Players. The first bulletin provides a hotfix for Adobe’s ColdFusion platform, resolving anonymously reported flaws that could allo...

Adobe ColdFusion Authentication Bypass (CVE-2013-0632)

An authentication bypass vulnerability has been reported in ColdFusion servers. A remote attacker could trigger this through Remote Development Services RDS or Administrator interfaces if they do not require authentication or through CSRF if APSB12-26 has not been applied...

Adobe ColdFusion Authentication Bypass (APSB13-03)

The version of Adobe ColdFusion running on the remote host is affected by an authentication bypass vulnerability. When RDS is disabled and not configured with password protection, it is possible to authenticate as an administrative user without providing a username or password. A remote,...

Adobe ColdFusion scheduleedit.cfm Authentication Bypass (CVE-2013-0625)

An authentication bypass vulnerability has been reported in ColdFusion servers. The vulnerability is due to enabling unauthenticated attacker to create a scheduled task which will be performed and allow attacker-controlled code to be uploaded to the vulnerable server. A remote attacker could...

Adobe ColdFusion 10 on IIS Unspecified DoS (APSB12-25) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by an unspecified denial of service. When used with Microsoft IIS, ColdFusion 10 is vulnerable to unspecified denial of service attacks. This vulnerability was introduced in ColdFusion 10 Update 1. C Tenable Network...

Adobe ColdFusion Unspecified Sandbox Bypass (APSB12-26) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by an unspecified sandbox permission bypass vulnerability. This vulnerability is present when ColdFusion is used in a shared-hosting environment. C Tenable Network Security, Inc. include"compat.inc"; if description...

Adobe ColdFusion Unspecified DoS (APSB12-21) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by an unspecified denial of service vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63689; scriptversion"1.8"; scriptcvsdate"Date: 2018/11/15 20:50:26";...

CVE-2013-0632

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as...

Authentication flaw

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as...

CVE-2013-0632

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as...

CVE-2013-0632

administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS component using the default empty password and leveraging this session to access the administrative web interface, as...