ID de Prueba:	1.3.6.1.4.1.25623.1.0.10001
Categoría:	CGI abuses
Título:	ColdFusion Vulnerability
Resumen:	NOSUMMARY
Descripción:	Description: It is possible to read arbitrary files on the remote server using the CGI : /cfdocs/expeval/exprcalc.cfm This CGI allows anyone to view, delete and upload anything on the remote ColdFusion Application server. See also : http://www.l0pht.com/advisories/cfusion.txt Solution : Allaire has posted a patch to this vulnerability. This is currently available at: http://www.allaire.com/handlers/index.cfm?ID=8727&Method=Full In addition to this patch, it is recommended that the documentation and example code not be stored on production servers. Risk factor : High
Referencia Cruzada:	BugTraq ID: 115 Common Vulnerability Exposure (CVE) ID: CVE-1999-0455 Allaire Security Bulletin: ASB-001 http://www.securityfocus.com/bid/115 XForce ISS Database: coldfusion-expression-evaluator Common Vulnerability Exposure (CVE) ID: CVE-1999-0477 L0pht Security Advisory: Cold Fusion App Server
Copyright	This script is Copyright (C) 1999 Renaud Deraison

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.