allaire

Top products

The 15 most recently published vulnerabilities affecting allaire.

• CVE-2002-0576ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, w...5.0Apr 2, 2003
• CVE-2002-0108Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.7.5Mar 15, 2002
• CVE-2001-1120Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.6.4Mar 15, 2002
• CVE-1999-0756ColdFusion Administrator with Advanced Security enabled allows remote users to stop the ColdFusion server via the Start/Stop utility.5.0Sep 18, 2001
• CVE-1999-1124HTTP Client application in ColdFusion allows remote attackers to bypass access restrictions for web pages on other ports by providing the target page to the mainframeset.cfm application, which requ...7.5Sep 12, 2001
• CVE-2000-0120The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.7.5May 7, 2001
• CVE-1999-0924The Syntax Checker in ColdFusion Server 4.0 allows remote attackers to conduct a denial of service.5.0May 7, 2001
• CVE-1999-0922An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.5.0May 7, 2001
• CVE-1999-0800The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.5.0May 7, 2001
• CVE-1999-0760Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.10.0May 7, 2001
• CVE-1999-0923Sample runnable code snippets in ColdFusion Server 4.0 allow remote attackers to read files, conduct a denial of service, or use the server as a proxy for other HTTP calls.7.5Feb 14, 2001
• CVE-1999-0757The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.2.1Feb 14, 2001
• CVE-2000-0862Vulnerability in an administrative interface utility for Allaire Spectra 1.0.1 allows remote attackers to read and modify sensitive configuration information.6.4Jan 22, 2001
• CVE-2000-0538ColdFusion Administrator for ColdFusion 4.5.1 and earlier allows remote attackers to cause a denial of service via a long login password.5.0Oct 13, 2000
• CVE-2000-0410ColdFusion Server 4.5.1 allows remote attackers to cause a denial of service by making repeated requests to a CFCACHE tagged cache file that is not stored in memory.5.0Jul 12, 2000