CVE-2009-1876

Adobe ColdFusion 8.0.1 and earlier are affected by a double-encoded null character information disclosure vulnerability. A remote attacker can trigger the issue via a specially crafted HTTP request, potentially obtaining sensitive information or source code from the server. The advisory APSB09-12...