Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2005-4343

Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".

  • Published: Dec 19, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-4343
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

No CWE or OWASP classifications available.

Software From Fixed in
macromedia / coldfusion 6.1 6.1.x
macromedia / coldfusion 7.0 7.0.x
macromedia / coldfusion 6.0 6.0.x