CVE-2004-2204 | BDVDB-2026-11290 Detail

Description#

Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/377213
https://exchange.xforce.ibmcloud.com/vulnerabilities/17567
http://secunia.com/advisories/12693
http://www.osvdb.org/10718
http://www.securityfocus.com/bid/11364
http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html

Exploit#

No public exploit known

History#

Version 12005-07-10Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.