CVE-1999-0455

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

5.85% chance of exploitation in the next 30 days, 93th percentile

Published

2000-02-04

Updated

2024-08-01

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/19093

References

• CVE Record
• NVD entry

Related

• CVE-1999-0451
• CVE-1999-0460
• CVE-1999-0450
• CVE-1999-0467
• CVE-1999-0448
• CVE-1999-0470