Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Macromedia Subscribe
Filtered by product Coldfusion Server
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0535 1 Macromedia 1 Coldfusion Server 2008-09-05 7.5 HIGH N/A
Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.