CVE-2005-4345

Description

References

• secunia.com/advisories/18078 · Patch
• securitytracker.com/id · Patch
• macromedia.com/devnet/security/security_zone/mpsb05-14.html · Patch
• securityfocus.com/bid/15904 · Patch
• vupen.com/english/advisories/2005/2948

coldfusion 的其他漏洞

• CVE-2006-3979高危 7.2The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the Cold…
• CVE-2006-2364中危 5.8Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject …
• CVE-2005-4344低危 2.1Adobe (formerly Macromedia) ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObject(Java) setting is disabled, which allows local u…
• CVE-2005-4343中危 5.0Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail v…
• CVE-2005-4342高危 7.5ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the Security…