CVE-2006-5858

Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source…

published January 10, 2007

CVSS
—
EPSS
14%
Percentile
96.5
In the wild
Unconfirmed
What it is

Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source code via a double URL-encoded NULL byte in a ColdFusion filename, such as a CFM file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13604 · 96.5th percentile
Published
2007-01-10T02:00Z
EPSS history
Timeline
  • 10 JAN 02:00Z
    Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directories, or read source…
    cvelistv5