Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2006-5858

Published: 31/12/2006 Updated: 23/11/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Adobe ColdFusion MX 7 up to and including 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote malicious users to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe coldfusion

adobe jrun 4.0

References

CWE-200http://www.adobe.com/support/security/bulletins/apsb07-02.htmlhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=466http://www.securityfocus.com/bid/21978http://secunia.com/advisories/23668http://securitytracker.com/id?1017490http://osvdb.org/32123http://www.vupen.com/english/advisories/2007/0116https://exchange.xforce.ibmcloud.com/vulnerabilities/31411http://www.securityfocus.com/archive/1/457799/100/0/threadedhttps://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site scriptingCVE-2024-5158XML external entityCVE-2024-4262CVE-2024-2036CVE-2024-4985CVE-2024-21791remote attackersCVE-2023-43208
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook