CVE-1999-0455

CVE-1999-0455 concerns the ColdFusion "Expression Evaluator" sample app, where the exprcalc.cfm page improperly restricts server access. The vulnerability allows remote attackers to read or delete files on the server, via a misconfigured access control in the Expression Evaluator workflow. Docume...