CVE-1999-0455

published 1999-12-25

CVE-1999-0455: The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not…

Priority P4 32 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

EXPLOIT

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
allaire	coldfusion_server	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.