high7.5Public exploit code
CVE-1999-0455
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restri…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Allaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution1998-12-25 · remote · multiple · Verified
Impact
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allaire | Coldfusion Server | Version 4.0 |