Filtered by vendor Allaire Subscriptions
Total 24 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2002-0108 1 Allaire 1 Forums 2025-04-03 N/A
Allaire Forums 2.0.4 and 2.0.5 and Forums! 3.0 and 3.1 allows remote authenticated users to spoof messages as other users by modifying the hidden form fields for the name and e-mail address.
CVE-2000-0189 1 Allaire 1 Coldfusion Server 2025-04-03 N/A
ColdFusion Server 4.x allows remote attackers to determine the real pathname of the server via an HTTP request to the application.cfm or onrequestend.cfm files.
CVE-2000-0334 1 Allaire 1 Spectra 2025-04-03 N/A
The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorized activities via an object-method that is added to the container object with a publishing rule.
CVE-2001-1120 1 Allaire 1 Coldfusion Server 2025-04-03 N/A
Vulnerabilities in ColdFusion 2.0 through 4.5.1 SP 2 allow remote attackers to (1) read or delete arbitrary files, or (2) overwrite ColdFusion Server templates.