Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Allaire ColdFusion远程服务器信息泄露漏洞
Vulnerability Description
Allaire ColdFusion是Macromedia 公司开发的一款Web应用服务器软件。 Allaire ColdFusion application.cfm的脚本实现上存在漏洞，远程攻击者可能收集到主机相关的一些有用信息。 正常的ColdFusion模板调用错误会被<cferror>或者<cftry> / <cfcatch>捕获。但是当Web站点有一个application.cfm(或者onrequestend.cfm)时，如果用户试图从客户端直接调用它，ColdFusion将返回一个错误信息页
CVSS Information
N/A
Vulnerability Type
N/A