Allaire

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 24
    Known Exploited: 0
    1
    Critical Level Threats
    7
    High Level Threats
    13
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2002-0576

    ColdFusion 5.0 and earlier on Windows systems allows remote attackers to determine the absolute pathname of .cfm or .dbm files via an HTTP request that contains an MS-DOS device name such as NUL, which leaks the pathname in an error message.

    Last Modified: Apr 16, 2026
    Published: Jun 18, 2002

    CVE-2002-0108

    Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.

    Last Modified: Apr 16, 2026
    Published: Mar 15, 2002

    CVE-2001-1120

    Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.

    Last Modified: Apr 16, 2026
    Published: Jul 11, 2001

    CVE-1999-0760

    Undocumented ColdFusion Markup Language (CFML) tags and functions in the ColdFusion Administrator allow users to gain additional privileges.

    Last Modified: Apr 16, 2026
    Published: Mar 12, 2001

    CVE-1999-0800

    The GetFile.cfm file in Allaire Forums allows remote attackers to read files through a parameter to GetFile.cfm.

    Last Modified: Apr 16, 2026
    Published: Mar 12, 2001
    Items Per Page
    Allaire Vulnerabilities & Security CVEs | CVE-DB