Page 4 of 24 results (0.005 seconds)

CVSS: 6.4EPSS: 0%CPEs: 1EXPL: 0

Allaire Forums 2.0.5 allows remote attackers to bypass access restrictions to secure conferences via the rightAccessAllForums or rightModerateAllForums variables. • http://www.osvdb.org/1270 http://www.securityfocus.com/bid/1085 http://www2.allaire.com/handlers/index.cfm?ID=15099&Method=Full •

CVSS: 5.0EPSS: 1%CPEs: 3EXPL: 0

ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files. • http://www.securityfocus.com/bid/1021 •

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0

The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs. • http://www.allaire.com/handlers/index.cfm?ID=13976&Method=Full http://www.securityfocus.com/bid/915 •

CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 1

Cold Fusion CFCACHE tag places temporary cache files within the web document root, allowing remote attackers to obtain sensitive system information. • https://www.exploit-db.com/exploits/19712 http://www.allaire.com/handlers/index.cfm?ID=13978&Method=Full http://www.securityfocus.com/bid/917 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL. • http://www.allaire.com/handlers/index.cfm?ID=13977&Method=Full http://www.securityfocus.com/bid/916 •