Allaire Coldfusion Server
14 CVEs affecting Allaire Coldfusion Server. Latest disclosed: 2002-06-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2002-0576 | | 2002-06-18 | ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contain… | |
CVE-2001-1120 | | 2001-07-11 | Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates. | |
CVE-1999-0924 | | 2001-03-12 | The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service. | |
CVE-1999-0923 | | 2001-03-12 | Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for othe… | |
CVE-1999-0922 | | 2001-03-12 | An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file. | |
CVE-1999-0760 | | 2001-03-12 | Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. | |
CVE-1999-0757 | | 2001-03-12 | The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates. | |
CVE-1999-0756 | | 2001-03-12 | ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. | |
CVE-2000-0538 | | 2000-06-07 | ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password. | |
CVE-2000-0410 | | 2000-05-10 | ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in m… | |
CVE-2000-0189 | | 2000-03-01 | ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. | |
CVE-2000-0057 | | 2000-01-04 | Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information. | |
CVE-1999-0477 | | 1999-12-25 | The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict… | |
CVE-1999-0455 | | 1999-12-25 | The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restri… |