high7.5Public exploit code
CVE-1999-0477
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Allaire ColdFusion Server 4.0 - Remote File Display / Deletion / Upload / Execution1998-12-25 · remote · multiple · Verified
Impact
The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allaire | Coldfusion Server | Versions 2.0, 3.0, 3.01, 3.11, 3.12, 4.0 |