The Expression Evaluator in the ColdFusion Application Server allows a remote attacker to upload files to the server via openfile.cfm, which does not restrict access to the server properly.
| Software | From | Fixed in |
|---|---|---|
| allaire / coldfusion_server | 4.0 | 4.0.x |
| allaire / coldfusion_server | 3.12 | 3.12.x |
| allaire / coldfusion_server | 2.0 | 2.0.x |
| allaire / coldfusion_server | 3.01 | 3.01.x |
| allaire / coldfusion_server | 3.0 | 3.0.x |
| allaire / coldfusion_server | 3.11 | 3.11.x |