Total vulnerabilities in the database
Adobe ColdFusion 9.0.1 CHF1 and earlier allows remote attackers to obtain sensitive information via an id=- query to a .cfm file, which reveals the installation path in an error message. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure
| Software | From | Fixed in |
|---|---|---|
| adobe / coldfusion | 7.0.2 | 7.0.2.x |
| adobe / coldfusion | 8.0 | 8.0.x |
| adobe / coldfusion | 9.0 | 9.0.x |
| adobe / coldfusion | 6.0 | 6.0.x |
| adobe / coldfusion | 7.0 | 7.0.x |
| adobe / coldfusion | 5.0 | 5.0.x |
| adobe / coldfusion | 6.1 | 6.1.x |
| adobe / coldfusion | 7.0.1 | 7.0.1.x |
| adobe / coldfusion | 8.0.1 | 8.0.1.x |
| adobe / coldfusion | - | 9.0.1.x |
| adobe / coldfusion | 8.1 | 8.1.x |
| adobe / coldfusion | 9.0.1 | 9.0.1.x |
| adobe / coldfusion | 4.5 | 4.5.x |