CVE-2002-0576
CVE-2002-0576
ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →