Approved changes feed: RSS · Atom

cpe:2.3:a:macromedia:coldfusion:6.1:*:enterprise_with_jrun:*:*:*:*:*

part: a version: 6.1 update: *

VendorMacromedia (f00ebe2b-9d72-52ca-9cf0-be998a2cdfa0)
ProductColdfusion (26100411-1341-5719-a01b-6960c4e93ee8)
Editionenterprise_with_jrun
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4343 vulnerable 2026-06-03 14:27:12.894851 Details available
Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".
Published: 2005-12-17T23:00:00.000Z
Updated: 2024-08-07T23:38:51.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4342 vulnerable 2026-06-03 14:27:12.893280 Details available
ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to "bypass security controls," aka "JRun Clustered Sandbox Security Vulnerability."
Published: 2005-12-17T23:00:00.000Z
Updated: 2024-08-07T23:38:51.745Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.