CVE-1999-0455
ColdFusion Server - Unauthenticated Arbitrary File Read and Delete via Expression Evaluator Sample
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-1999-0455.
AI-analyzed exploit summary This exploit leverages a path traversal vulnerability in ColdFusion's ExprCalc.cfm to read, delete, or upload arbitrary files on the server. By manipulating the OpenFilePath parameter, an attacker can access sensitive files or execute malicious ColdFusion scripts.
Description
The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.
Exploits (1)
This exploit leverages a path traversal vulnerability in ColdFusion's ExprCalc.cfm to read, delete, or upload arbitrary files on the server. By manipulating the OpenFilePath parameter, an attacker can access sensitive files or execute malicious ColdFusion scripts.