codewhitesec/ColdFusionPwn

PoC

Exploitation Tool for CVE-2017-3066 targeting Adobe Coldfusion 11/12

view exploit source poc_in_githubauthor codewhitesecpublished 2018-03-12catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-3066US	critical9.8OT critical	90.6% (100th)	KEV	2017-04-27
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apache BlazeDS…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.