Vulnerabilities > Macromedia > Coldfusion Server > 4.x

DATE CVE VULNERABILITY TITLE RISK
2001-10-30 CVE-2001-0535 Unspecified vulnerability in Macromedia Coldfusion Server 4.X
Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.
network
low complexity
macromedia
7.5