2910 matches found
CVE-2001-1514
ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to 1 child processes created with and 2 child processes that call the CreateProcess function and are executed with or end with the CFX extension...
ColdFusion Debug Mode Information Disclosure
It is possible to see the ColdFusion Debug Information by appending '?Mode=debug' at the end of the request. ColdFusion 4.5 and 5.0 are definitely concerned probably in addition older versions. The Debug Information usually contain sensitive data such as Template Path or Server Version...
CVE-2001-0535
Example applications Exampleapps in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" CGI.Host variable in 1 the "Web Publish" example script, and ...
CVE-2001-0535
Example applications Exampleapps in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" CGI.Host variable in 1 the "Web Publish" example script, and ...
CVE-2001-0535
The CVE-2001-0535 issue affects ColdFusion Server 4.x Exampleapps, where access checks do not correctly limit requests from outside the local host domain. This enables remote attackers to spoof the HTTP Host (CGI.Host) to the Web Publish and Email example scripts, allowing upload, read, or execut...
CVE-1999-0756
ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility...
CVE-1999-0756
Technical details about CVE-1999-0756 are not publicly provided in the supplied documents. No affected product versions, root cause specifics, or fixes are included. Monitor for updates from Red Hat, CVE lists, or EUVD feeds.
CVE-1999-1124
HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host...
CVE-1999-1124
CVE-1999-1124 describes a flaw in the HTTP Client application within ColdFusion where an attacker can bypass access restrictions on pages on other ports. The root cause is that the mainframeset.cfm flow retrieves the target page from the server, making it appear as if the request originates from ...
Дырки в ColdFusion (file access)
Уязвимости в демонстрационных приложениях...
ISSalert: ISS Advisory: Remote Vulnerabilities in Macromedia ColdFusion Example Applications
TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security...
Allaire ColdFusion Server contains vulnerability allowing templates to be overwritten by zero byte file of the same name
Overview A vulnerability exists in Allaire ColdFusion Server which allows an attacker to overwrite ColdFusion Server templates with zero byte files. Description A remotely exploitable vulnerability exists in the Allaire ColdFusion Server which could allow an attacker to overwrite ColdFusion Serve...
Allaire ColdFusion Server contains vulnerability allowing unauthorized user read/delete access to files
Overview A vulnerability exists in Allaire ColdFusion Server which allows an attacker to have unauthorized read and delete access to files on the target host. Description A remotely exploitable vulnerability exists in the Allaire ColdFusion Server which could allow an attacker to have unauthorize...
Заткнут доступ к файлам в ColdFusion (unauthorized access)
Можно прочитать или удалить файлы, заменить содержимое файла нулями...
Product Security Bulletin (MPSB01-07)
Macromedia Product Security Bulletin MPSB01-07 Macromedia releases patch that addresses ColdFusion Server security issues. Originally Posted: July 11, 2001 Summary Macromedia has released a patch that addresses two ColdFusion Server security issues which affect all server versions from 2.0 throug...
CVE-2001-1120
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to 1 read or delete arbitrary files, or 2 overwrite ColdFusion Server templates...
CVE-2001-1427
Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors...
CVE-1999-0760
Undocumented ColdFusion Markup Language CFML tags and functions in the ColdFusion Administrator allow users to gain additional privileges...
CVE-1999-0924
The CVE-1999-0924 entry concerns ColdFusion Server 4.0, where the Syntax Checker component is the vulnerable element. The issue enables remote denial of service. The connected documents reiterate the same description and do not provide explicit exploit vectors, affected build numbers beyond “4.0,...