The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
> AFFECTED_PRODUCTS
Allaire - Coldfusion Server
Version: 2.0
Allaire - Coldfusion Server
Version: 3.0
Allaire - Coldfusion Server
Version: 3.01
Allaire - Coldfusion Server
Version: 3.11
Allaire - Coldfusion Server
Version: 3.12
Allaire - Coldfusion Server
Version: 4.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
25/12/1999 05:00
Source: NVD
📊
ENRICHISSEMENT
18/10/2025 13:59
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 1 year ago