VYPR

Coldfusion Server

Sign in to watch

by Macromedia

CVEs (1)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2001-05350.000.01Oct 30, 2001Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.