Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Adobe ColdFusion MX7 allows remote attackers to obtain sensitive information via a URL request (1) for a non-existent (a) JWS, (b) CFM, (c) CFML, or (d) CFC file, which displays the installation path in the resulting error message; or (2) to /CFIDE/administrator/login.cfm without a host, which can reveal the server's internal IP address in an HREF tag.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ColdFusion 'login.cfm'信息泄露漏洞
Vulnerability Description
ColdFusion MX是一款高效的网络应用服务器开发环境，具有很高的易用性和开发效率，基于标准的Java技术，可以与XML、Web Services和Microsoft.NET环境相集成。 如果远程攻击者能够向ColdFusion提交以以下格式结束的无效请求的话，就会导致在返回结果中泄漏服务器路径： /.jws /.cfm /.cfml /.cfc 如果未经提供主机便请求了/CFIDE/administrator/login.cfm页面的话，就会导致在href标签中泄漏服务器的内部IP地址。 此外，如
CVSS Information
N/A
Vulnerability Type
N/A