CVE-2001-1120

Published: Jul 11, 2001Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.

Affected (12)

Products: Allaire: Coldfusion Server

Allaire

1 product

Coldfusion Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Allaire Coldfusion Server	Version 2.0
Allaire Coldfusion Server	Version 3.0.1
Allaire Coldfusion Server	Version 3.0
Allaire Coldfusion Server	Version 3.1.1
Allaire Coldfusion Server	Version 3.1.2
Allaire Coldfusion Server	Version 3.1
Allaire Coldfusion Server	Version 4.0.1
Allaire Coldfusion Server	Version 4.0
Allaire Coldfusion Server	Version 4.5.1
Allaire Coldfusion Server	Version 4.5.1_sp1
Allaire Coldfusion Server	Version 4.5.1_sp2
Allaire Coldfusion Server	Version 4.5