CVE-2002-1309

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2002-11/0149.html · Exploit
• archives.neohapsis.com/archives/vulnwatch/2002-q4/0080.html
• marc.info
• eeye.com/html/Research/Advisories/AD20021112.html

coldfusion のその他の脆弱性

• CVE-2006-3979高 7.2The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the Cold…
• CVE-2006-2364中 5.8Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject …
• CVE-2005-4345高 7.2Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers t…
• CVE-2005-4344低 2.1Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local u…
• CVE-2005-4343中 5.0Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail v…