CVE-1999-0924

Description

References

• allaire.com/handlers/index.cfm · Patch
• osvdb.org/3236
• exchange.xforce.ibmcloud.com/vulnerabilities/1742

coldfusion server 的其他漏洞

• CVE-2002-0576中危 5.0ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP r…
• CVE-2001-1120中危 6.4Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusi…
• CVE-1999-0923高危 7.5Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server …
• CVE-1999-0922中危 5.0An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.
• CVE-1999-0760严重 10.0Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.