EDB-24946
functionalAdobe ColdFusion APSB13-03 - Remote Multiple Vulnerabilities (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2013-04-10catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-0632US | critical9.8OT critical | KEV | ||
administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the RDS compon… | ||||
| CVE-2013-0629US | high7.5OT critical | KEV | ||
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild i… | ||||
| CVE-2013-0625US | critical9.8OT critical | KEV | ||
Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vect… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan