CVE-1999-1124 | BDVDB-2026-2646 Detail

Description#

HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requests the page from the server, making it look like the request is coming from the local host.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstorm.securify.com/mag/phrack/phrack54/P54-08

Exploit#

No public exploit known

History#

Version 12001-09-12Record published in the CVE List.
Version 22024-08-01Most recent update recorded in the CVE List.