7.5
CVSSv2

CVE-2014-2868

Published: 15/04/2014 Updated: 16/04/2014
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

PaperThin CommonSpot prior to 7.0.2 and 8.x prior to 8.0.3 allows remote malicious users to modify the flow of execution of ColdFusion code by using an HTTP GET request to set a ColdFusion variable.

Vulnerable Product Search on Vulmon Subscribe to Product

paperthin commonspot content server

paperthin commonspot content server 8.0.2

paperthin commonspot content server 8.0.1

paperthin commonspot content server 8.0.0