Vulnerability in Allaire Coldfusion Server
CVE-2000-0189
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
EPSS: 0.019 (77.9th percentile) — read the EPSS interpretation.
Affected products
- Allaire Coldfusion_server — versions 4.0, 4.0.1, 4.5
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)