CVE-1999-0760: Undefined Security Weakness

Undocumented ColdFusion Markup Language CFML tags and functions in the ColdFusion Administrator allow users to gain additional privileges...

CVE-1999-0757

The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates...

CVE-1999-0756

ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility...

CVE-1999-0760

Undocumented ColdFusion Markup Language CFML tags and functions in the ColdFusion Administrator allow users to gain additional privileges...

CVE-1999-0923

Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls...

CVE-1999-0922

An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file...

CVE-1999-0924

The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service...

CVE-1999-0757

CVE-1999-0757 concerns the ColdFusion CFCRYPT program used for encrypting CFML templates. Multiple sources (NVD, Red Hat and CVE records) describe the issue as weak encryption that allows an attacker to decrypt the encrypted templates. The affected component is CFCRYPT, and the underlying impact ...

CVE-1999-0923

CVE-1999-0923 affects ColdFusion Server 4.0 through sample runnable code snippets that allow remote attackers to read files, cause a denial of service, or use the server as a proxy for other HTTP calls. The description indicates impact on confidentiality, integrity, and availability (partial C/I/...

CVE-1999-0757

The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates...

CVE-1999-0923

Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls...

CVE-1999-0923: Undefined Security Weakness

Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls...

CVE-1999-0757: Undefined Security Weakness

The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates...

DoS против ColdFusion

Пользователь может вызвать предельную загрузку сервера путем обращения к определенным скриптам...

ColdFusion Denial of Service vulnerability in sample script

Subject: ColdFusion Denial of Service vulnerability in sample script Software: ColdFusion Server Professional 4.5.1 Eval for Windows SP2 Risk Level: Medium Author: Niels Heinen Vendor Status: The vendor has released a document concerning this problem Exploitable: Remotely Impact of the...

CVE-2000-0538

CVE-2000-0538 affects ColdFusion Administrator for ColdFusion 4.5.1 and earlier. A remote attacker can cause a denial-of-service by submitting an abnormally long login password, with OpenVAS notes describing passwords over 40,0000 characters that overwhelm the server. No explicit fixes or patches...

CVE-2000-0538

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password...

CVE-2000-0538: Undefined Security Weakness

ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password...

CVE-2000-0382

ColdFusion ClusterCATS appends stale query string arguments to a URL during HTML redirection, which may provide sensitive information to the redirected site...

CVE-2000-0410

ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory...