CVE-2004-2204

概要

参考情報

• secunia.com/advisories/12693 · Vendor Advisory
• macromedia.com/devnet/security/security_zone/mpsb04-10.html · Vendor Advisory
• osvdb.org/10718
• securityfocus.com/archive/1/377213
• securityfocus.com/bid/11364
• exchange.xforce.ibmcloud.com/vulnerabilities/17567

coldfusion のその他の脆弱性

• CVE-2006-3979高 7.2The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the Cold…
• CVE-2006-2364中 5.8Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject …
• CVE-2005-4345高 7.2Adobe (formerly Macromedia) ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers t…
• CVE-2005-4344低 2.1Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local u…
• CVE-2005-4343中 5.0Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail v…