CVE-2005-2481

ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an…

published August 5, 2005

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "?" (question mark) character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01194 · 67.8th percentile
Published
2005-08-05T04:00Z
EPSS history
Timeline
  • 05 AUG 04:00Z
    ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an…
    cvelistv5