CVE-2004-0928

No fix known EPSS 4%

The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".

Published 2005-04-21 · CVE record · OSV

Products: hitachi cosminexus_enterprise, hitachi cosminexus_server, macromedia coldfusion, macromedia jrun