| Package | Affected versions | Patched versions |
|---|---|---|
| coldfusion | = 6.0= 6.1= 7.0 |
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free