Signature Detail
Short Name |
HTTP:COLDFUSION:GETFILE-PROBE |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
Coldfusion Getfile.cfm Probe |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Coldfusion Getfile.cfm Probe
This signature detects attempts to exploit a known vulnerability in the getfile.cfm script. Attackers can access files on the Web server.
Extended Description
An Allaire Forums file "GetFile.cfm" in the root of the application directory allows anyone to access any file on the Forums server. This vulnerability affects Forums 2.0.4 and earlier.
Affected Products
- Allaire Forums 2.0.4
References
- BugTraq: 229
- CVE: CVE-1999-0800