Vulnerability in Allaire Coldfusion Server
CVE-1999-0455
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
EPSS: 0.058 (92.4th percentile) — read the EPSS interpretation.
Affected products
- Allaire Coldfusion_server — versions 4.0
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)