CVE-2013-3336

This exploit leverages a Local File Inclusion (LFI) vulnerability in Adobe ColdFusion 9/10 to disclose sensitive information, including absolute paths and credentials stored in password.properties. It performs fingerprinting and OS detection before attempting to extract credentials.

This Metasploit module exploits a directory traversal vulnerability in ColdFusion to extract sensitive information such as password hashes from the 'password.properties' file. It targets ColdFusion 9 and 10 by leveraging a path traversal technique to access restricted files.