Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Adobe ColdFusion Information Disclosure Jan 21 2007 05:16PM
zck zck (zckzck gmail com)
Hi people,

I was wondering whether I was right or not about this vuln:
http://www.securityfocus.com/bid/21978

Unfortunately, I don't have a Colfusion to test on.. What I would do is:
http://colfusion-server/an-existing-file.cfm%2500.cfm

and I expect the server to spit out the source code....

Am ...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus