Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2015-0345] ColdFusion Bomb: A Chain Reaction From XSS to RCE

bishopfox.com | vulnerability | CVE-2015-0345 | #rce | #xss | #adobe | #exploit-chain | #coldfusion | #cve-2015-0345

Summary

The technical companion to CVE-2015-0345: a DOM-based XSS in ColdFusion's admin panel chains into remote code execution by scheduling tasks and planting a CFML shell.
Published
Collected

original ↗

Related coverage

back