Exploitation Summary
CVE-2013-0629 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added March 7, 2022. EIP tracks 1 public exploit.
AI-analyzed exploit summary This Metasploit module exploits multiple vulnerabilities in Adobe ColdFusion APSB13-03, including directory traversal (CVE-2013-0629) and authentication bypass (CVE-2013-0632), to achieve remote command execution. It leverages scheduled tasks to drop and execute payloads on the target system.
Description
Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in the wild in January 2013.
Exploits (1)
This Metasploit module exploits multiple vulnerabilities in Adobe ColdFusion APSB13-03, including directory traversal (CVE-2013-0629) and authentication bypass (CVE-2013-0632), to achieve remote command execution. It leverages scheduled tasks to drop and execute payloads on the target system.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N