Unrated severityNVD Advisory· Published Jul 11, 2001· Updated Apr 16, 2026
CVE-2001-1120
CVE-2001-1120
Description
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.
Affected products
12cpe:2.3:a:allaire:coldfusion_server:2.0:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:allaire:coldfusion_server:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:3.1:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:3.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:3.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:4.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:4.5.1_sp1:*:*:*:*:*:*:*
- cpe:2.3:a:allaire:coldfusion_server:4.5.1_sp2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www.securityfocus.com/bid/3018nvdPatchVendor Advisory
- www.securityfocus.com/archive/1/196452nvdVendor Advisory
- www.kb.cert.org/vuls/id/135531nvdUS Government Resource
- www.allaire.com/handlers/index.cfmnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/6839nvd
News mentions
0No linked articles in our index yet.