1152 matches found
ColdFusion Installed on Microsoft Windows (credentialed check)
Adobe ColdFusion formerly Macromedia ColdFusion, a rapid application development platform, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55514; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate",...
Adobe ColdFusion Remote Development Services
Remote Development Services RDS is enabled on the remote ColdFusion server. RDS allows developers to use IDEs such as Dreamweaver to manage applications. It is recommended that RDS be disabled for production servers and that it be configured to require authentication on development servers. C...
CVE-2011-0629
Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2011-2091
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...
Code injection
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2011-0629
CVE-2011-0629 documents confirm a cross-site request forgery (CSRF) flaw affecting Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1. The underlying issue enables remote attackers to hijack a user’s authenticated session via unknown vectors. The public materials do not specify the exact attack vectors,...
CVE-2011-2091
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...
CVE-2011-0629
Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Adobe ColdFusion Admin Requires No Authentication
The version of ColdFusion running on the remote host allows access to its administration pages without authentication. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53297; scriptversion"1.9";...
Adobe ColdFusion - Directory Traversal
Exploit for windows platform in category remote exploits $Id: coldfusiontraversal.rb 11974 2011-03-16 01:38:16Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Adobe ColdFusion - Directory Traversal
$Id: coldfusiontraversal.rb 11986 2011-03-16 10:15:54Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Adobe ColdFusion - Directory Traversal (Metasploit)
$Id: coldfusiontraversal.rb 11974 2011-03-16 01:38:16Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Adobe ColdFusion Cross Site Scripting
http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-08 PR10-08: Various XSS and information disclosure flaws within Adobe ColdFusion administration console Vulnerability found: 17th April 2010 Vendor informed: 19th April 2010 Vulnerability fixed: 8th February 2011 Severity:...
Adobe ColdFusion login.cfm Query String XSS (APSB11-04)
The version of Adobe ColdFusion running on the remote host has is affected by a cross-site scripting vulnerability in the administrative web interface. Input to the query string of 'administrator/login.cfm' is not properly sanitized before being returned in an HTML response. A remote attacker can...
CVE-2011-0584
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2011-0581
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags...
CVE-2011-0580
Multiple cross-site scripting XSS vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...