Bryan Alexander

2 exploits Active since Feb 2020
CVE-2014-5468 METASPLOIT HIGH ruby WORKING POC
Railo < 4.2.1.000 - Remote File Inclusion via Thumbnail CFM Request
A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
CVSS 8.8
CVE-2014-5468 EXPLOITDB HIGH ruby WORKING POC
Railo < 4.2.1.000 - Remote File Inclusion via Thumbnail CFM Request
A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
CVSS 8.8