Bugtraq mailing list archives
Adobe ColdFusion Information Disclosure
From: "zck zck" <zckzck () gmail com>
Date: Sun, 21 Jan 2007 19:16:26 +0200
Hi people, I was wondering whether I was right or not about this vuln: http://www.securityfocus.com/bid/21978 Unfortunately, I don't have a Colfusion to test on.. What I would do is: http://colfusion-server/an-existing-file.cfm%2500.cfm and I expect the server to spit out the source code.... Am I right here? Did anybody try this out? If so, how did you do it? Thank you. Cheers, Mateo
Current thread:
- Adobe ColdFusion Information Disclosure zck zck (Jan 23)