CVSS: 5.0EPSS: 1%CPEs: 3EXPL: 0CVE-2002-0576
https://notcve.org/view.php?id=CVE-2002-0576
18 Jun 2002 — ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message. • http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0028.html •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2002-0108
https://notcve.org/view.php?id=CVE-2002-0108
15 Mar 2002 — Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address. Allaire Forums 2.0.4 y 2.0.5 y Foros! 3.0 y 3.1 permiten a usuarios remotos autorizados suplantar la identidad de otros usuarios (Spoofing) para enviar mensajes modificando en el formulario los campos de nombre y dirección de correo. • http://online.securityfocus.com/archive/1/249026 •
CVSS: 7.5EPSS: 1%CPEs: 12EXPL: 0CVE-2001-1120
https://notcve.org/view.php?id=CVE-2001-1120
11 Jul 2001 — Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates. • http://www.allaire.com/handlers/index.cfm?id=21566 •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0922
https://notcve.org/view.php?id=CVE-1999-0922
12 Mar 2001 — An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file. • http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0924
https://notcve.org/view.php?id=CVE-1999-0924
12 Mar 2001 — The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service. • http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0CVE-1999-0756
https://notcve.org/view.php?id=CVE-1999-0756
12 Mar 2001 — ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility. • http://www.allaire.com/handlers/index.cfm?ID=10968&Method=Full •
CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0CVE-1999-0760
https://notcve.org/view.php?id=CVE-1999-0760
12 Mar 2001 — Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges. • http://www.allaire.com/handlers/index.cfm?ID=11714&Method=Full •
CVSS: 7.5EPSS: 7%CPEs: 1EXPL: 2CVE-1999-0800 – Allaire Forums 2.0.4 - Getfile
https://notcve.org/view.php?id=CVE-1999-0800
12 Mar 2001 — The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm. • https://www.exploit-db.com/exploits/19193 •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-1999-0923
https://notcve.org/view.php?id=CVE-1999-0923
14 Feb 2001 — Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls. • http://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-1999-0757 – Allaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt Pages
https://notcve.org/view.php?id=CVE-1999-0757
14 Feb 2001 — The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates. • https://www.exploit-db.com/exploits/19220 •