Description
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
References
- 1021 vdb-entry
Unscored
CVE-2000-0189
EUVD-2000-0188GHSA-4rjq-mf8f-5v58
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or on…
Published Apr 10, 2000 · Updated Aug 8, 2024 · Assigned by mitre