Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-08T04:21:38.620Z
Reserved: 2001-06-28T00:00:00
Link: CVE-2001-0535

No data.

Status : Modified
Published: 2001-10-30T05:00:00.000
Modified: 2024-11-20T23:35:35.607
Link: CVE-2001-0535

No data.