EDB-19093
functionalAllaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution
view exploit source exploit_dbverifiedtype remoteauthor rain.forest.puppypublished 1998-12-25catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-1999-0455US | high7.5 | Exploit | ||
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the serv… | ||||
| CVE-1999-0477US | high7.5 | Exploit | ||
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan