Vulnerabilities > Macromedia > Coldfusion > 4.5
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2001-12-31 | CVE-2001-1514 | Unspecified vulnerability in Macromedia Coldfusion 4.5/5.0 ColdFusion 4.5 and 5, when running on Windows with the advanced security sandbox type set to "operating system," does not properly pass security context to (1) child processes created with <CFEXECUTE> and (2) child processes that call the CreateProcess function and are executed with <CFOBJECT> or end with the CFX extension, which allows attackers to execute programs with the permissions of the System account. | 10.0 |
2001-07-11 | CVE-2001-1427 | Unspecified vulnerability in Macromedia Coldfusion Unknown vulnerability in ColdFusion Server 2.0 through 4.5.1 SP2 allows remote attackers to overwrite templates with zero byte files via unknown attack vectors. | 7.5 |