ASB99-08Vendor advisory
http://www.allaire.com/handlers/index.cfm?ID=10969&Method=Full CVE-1999-0757
Allaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt Pages
Record summary
CVE-1999-0757 has a selected CVSS score of 2.1; EIP currently links 1 catalogued exploit.
Description
The ColdFusion CFCRYPT program for encrypting CFML templates has weak encryption, allowing attackers to decrypt the templates.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBAllaire ColdFusion Server 4.0.1 - 'CFCRYPT.EXE' Decrypt PagesExploitDB exploitby Matt ChapmanNot analyzed1 file
References
3coldfusion-encryption(2208)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/2208 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-1999-0757