Vulnerability Scanning Solutions, LLC.
Our Process
What We Scan For
Sample Report
Client List
Contact Us
What We Scan For
Family: CGI abuses --> Category: infos

ColdFusion Vulnerability Vulnerability Scan

Vulnerability Scan Summary
Checks for a ColdFusion vulnerability

Detailed Explanation for this Vulnerability Test

It is possible to read arbitrary files on the remote
server using the CGI :


This CGI allows anyone to view, delete and upload
anything on the remote ColdFusion Application

See also :

Solution : Allaire has posted a patch to this
vulnerability. This is currently available at:

In addition to this patch, it is recommended that
the documentation and example code not be stored
on production servers.

Threat Level: High

Click HERE for more information and discussions on this network vulnerability scan.


P.O. Box 827051

Pembroke Pines, FL 33082-7051

Vulnerability Scanning Solutions, LLC.