CVEvulnerability

CVE-2001-0535

7.5 HIGH Published 2001-10-30 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-10-30
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.

Affected configurations

• macromedia coldfusion server 4.x

References