Search:Software:ColdFusion Server 5.0 - security vulnerabilities database

[EN] securityvulns.ru
no-pyccku

See also
MACROMEDIA : ColdFusion Server 4.5
Name: ADOBE : ColdFusion Server 5.0

ColdFusion crossite scripting
document User-Agent field from HTTP request is used unfiltered in error message text. It's possible to manipulate client's User-Agent field through Flash.

test server