Adobe ColdFusion Remote Development Services

Remote Development Services RDS is enabled on the remote ColdFusion server. RDS allows developers to use IDEs such as Dreamweaver to manage applications. It is recommended that RDS be disabled for production servers and that it be configured to require authentication on development servers. C...

CVE-2011-0629

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-2091

Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-2091

Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2011-0629

CVE-2011-0629 documents confirm a cross-site request forgery (CSRF) flaw affecting Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1. The underlying issue enables remote attackers to hijack a user’s authenticated session via unknown vectors. The public materials do not specify the exact attack vectors,...

CVE-2011-0629

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2011-2091

CVE-2011-2091 affects Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1. The vulnerability is described as unspecified and leads to denial of service via unknown vectors. The connected materials confirm the affected versions and DoS impact but do not provide concrete root-cause details, exploitable vec...

Adobe Patches Critical Bugs in Flash, Reader, Acrobat

Adobe has released a number of patches for critical vulnerabilities in several of its more popular applications, including Flash, Reader and Acrobat. The most severe of the vulnerabilities that Adobe fixed Tuesday is a flaw in Flash that is being used in targeted attacks right now through...

Site Developed by Magfiroh SQL Injection Vulnerability

Exploit for php platform in category web applications Title : Site Developed by Magfiroh Vulnerable to SQL Injection Filetype : ColdFusion Found by : p0pc0rn Dork : inurl:".cfm?judul=" SQL --- http://site.com/parameter.cfm?judul=SQL POC --- http://site.com/downloaddetail.cfm?judul=1' Live Demo...

Adobe ColdFusion Admin Requires No Authentication

The version of ColdFusion running on the remote host allows access to its administration pages without authentication. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53297; scriptversion"1.9";...

Adobe ColdFusion - Directory Traversal

Exploit for windows platform in category remote exploits $Id: coldfusiontraversal.rb 11974 2011-03-16 01:38:16Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Adobe ColdFusion - Directory Traversal

$Id: coldfusiontraversal.rb 11986 2011-03-16 10:15:54Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe ColdFusion - Directory Traversal (Metasploit)

$Id: coldfusiontraversal.rb 11974 2011-03-16 01:38:16Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe ColdFusion Cross Site Scripting

http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-08 PR10-08: Various XSS and information disclosure flaws within Adobe ColdFusion administration console Vulnerability found: 17th April 2010 Vendor informed: 19th April 2010 Vulnerability fixed: 8th February 2011 Severity:...

Adobe ColdFusion login.cfm Query String XSS (APSB11-04)

The version of Adobe ColdFusion running on the remote host has is affected by a cross-site scripting vulnerability in the administrative web interface. Input to the query string of 'administrator/login.cfm' is not properly sanitized before being returned in an HTML response. A remote attacker can...

CVE-2011-0584

Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2011-0583

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag...

CVE-2011-0581

Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags...