CVE-2001-0535 | BDVDB-2026-3061 Detail

Description#

Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12001-10-12Record published in the CVE List.
2. Version 22024-08-08Most recent update recorded in the CVE List.