Adobe ColdFusion Multiple Vulnerabilities (APSA13-03)

The version of Adobe ColdFusion running on the remote host is affected by the following vulnerabilities : - A directory traversal vulnerability exists in /administrator/mail/download.cfm. A remote, authenticated attacker can exploit this issue to download arbitrary files. - A local file include...

Adobe ColdFusion Authentication Bypass (APSB13-13) (intrusive check)

The version of Adobe ColdFusion running on the remote host has an authentication bypass vulnerability. When RDS is disabled and not configured with password protection, it is possible to authenticate as an administrative user without providing a username or password. A remote, unauthenticated...

Washington Court Data Breach Exposes 160K SSNs

Attackers using a vulnerability in Adobe’s ColdFusion app server were able to compromise servers belonging to the Washington State court system sometime in the last few months and walked off with data belonging to as many as a million residents of the state. The attackers had access to 160,000...

Adobe ColdFusion Information Disclosure Vulnerability (APSB13-13)

Adobe ColdFusion is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2013-3336

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors...

CVE-2013-3336

Unspecified vulnerability in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to read arbitrary files via unknown vectors...

Adobe ColdFusion security vulnerabilities

Information leakage, unauthorized access...

CVE-2013-1388

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

CVE-2013-1387

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors...

CVE-2013-1387

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to impersonate users via unknown vectors...

CVE-2013-1388

CVE-2013-1388 affects Adobe ColdFusion 9.0 (before Update 10), 9.0.1 (before Update 9), 9.0.2 (before Update 4), and 10 (before Update 9). The vulnerability allows an attacker to obtain access to the administrator console via unknown vectors. Public sources consistently describe an unspecified vu...

CVE-2013-1388

Unspecified vulnerability in Adobe ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9 allows attackers to obtain administrator-console access via unknown vectors...

CVE-2013-1387

Adobe ColdFusion is affected by multiple vulnerabilities addressed in APSB13-10 (CVE-2013-1387 and CVE-2013-1388). Affected products include ColdFusion 9.0 before Update 10, 9.0.1 before Update 9, 9.0.2 before Update 4, and 10 before Update 9. For CVE-2013-1387, an unspecified user impersonation ...

Adobe ColdFusion APSB13-03 Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...

Adobe ColdFusion APSB13-03 Remote Exploit

Exploit for multiple platform in category remote exploits require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit3 'Adobe ColdFusion APSB13-03', 'Description' = %q This module exploits a pile of vulnerabilities in Adobe ColdFusion APSB13-03: CVE-2013-0625: arbitrary command...

Adobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'digest/sha1' require 'openssl' class Metasploit...

Adobe ColdFusion Authentication Bypass (APSB13-03)

The version of Adobe ColdFusion running on the remote host is affected by an authentication bypass vulnerability. When RDS is disabled and not configured with password protection, it is possible to authenticate as an administrative user without providing a username or password. A remote,...

Adobe ColdFusion Authentication Bypass (CVE-2013-0632)

An authentication bypass vulnerability has been reported in ColdFusion servers. A remote attacker could trigger this through Remote Development Services RDS or Administrator interfaces if they do not require authentication or through CSRF if APSB12-26 has not been applied...