Filtered by vendor Allaire Subscriptions
Total 24 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-1999-0800 1 Allaire 1 Forums 2025-04-03 N/A
The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.
CVE-2000-0051 1 Allaire 1 Spectra 2025-04-03 N/A
The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting data collections for indexing via a URL.
CVE-2000-0120 1 Allaire 1 Spectra 2025-04-03 N/A
The Remote Access Service invoke.cfm template in Allaire Spectra 1.0 allows users to bypass authentication via the bAuthenticated parameter.
CVE-2000-0189 1 Allaire 1 Coldfusion Server 2025-04-03 N/A
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.