Description
Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates that are located outside of the sandbox.
References
- ADV-2006-3574 vdb-entry
- 19985 vdb-entry
- coldfusion-cfml-sandbox-bypass(28920) vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb06-13.html
- 1016833 vdb-entry
- 21866 third-party-advisory