Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-0757. PoCs published by Matt Chapman.
AI-analyzed exploit summary This exploit decrypts ColdFusion templates encrypted with CFCRYPT.EXE by leveraging a known vulnerability in the encryption scheme. It reads an encrypted file, extracts the header, and decrypts the content using a hardcoded DES key derived from an error message string.
Description
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
Exploits (1)
This exploit decrypts ColdFusion templates encrypted with CFCRYPT.EXE by leveraging a known vulnerability in the encryption scheme. It reads an encrypted file, extracts the header, and decrypts the content using a hardcoded DES key derived from an error message string.