Vulnerabilities > CVE-2000-0189 - Unspecified vulnerability in Allaire Coldfusion Server 4.0/4.0.1/4.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |