---
id: 4270
title: "[CVE-2015-0345] ColdFusion Bomb: A Chain Reaction From XSS to RCE"
cve: CVE-2015-0345
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/coldfusion-bomb-chain-reaction-xss-to-rce"
published_at: "2015-08-27T00:00:00Z"
tags: ["rce", "xss", "adobe", "exploit-chain", "coldfusion", "cve-2015-0345"]
phying_url: "https://phying.com/item/4270"
lang: en
---

# [CVE-2015-0345] ColdFusion Bomb: A Chain Reaction From XSS to RCE

## Summary

The technical companion to CVE-2015-0345: a DOM-based XSS in ColdFusion's admin panel chains into remote code execution by scheduling tasks and planting a CFML shell.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2015-0345
- **Published:** 2015-08-27T00:00:00Z
- **Original:** https://bishopfox.com/blog/coldfusion-bomb-chain-reaction-xss-to-rce
- **Phying News:** https://phying.com/item/4270