Vulnerabilities > Macromedia > Coldfusion Professional > Medium

DATE CVE VULNERABILITY TITLE RISK
2003-12-31 CVE-2003-1469 Information Exposure vulnerability in Macromedia Coldfusion and Coldfusion Professional
The default configuration of ColdFusion MX has the "Enable Robust Exception Information" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.
network
low complexity
microsoft macromedia CWE-200
5.0
2002-12-31 CVE-2002-1992 Buffer Overrun vulnerability in Macromedia Coldfusion and Coldfusion Professional
Buffer overflow in jrun.dll in ColdFusion MX, when used with IIS 4 or 5, allows remote attackers to cause a denial of service in IIS via (1) a long template file name or (2) a long HTTP header.
network
low complexity
macromedia
5.0