| Package | Affected versions | Patched versions |
|---|---|---|
| coldfusion server | = 4.0= 4.0.1= 4.5 |
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free