CFAJAX Security Flaw

Posted At : July 13, 2006 9:35 PM | Posted By : James Holmes
Related Categories: AJAX,ColdFusion

Rick Root discovered a flaw in the way CFAJAX handles string inputs. The flaw allows a remote user to execute arbitrary CF functions on the host server.

See his blog for full details and for a fix:

http://www.opensourcecf.com/1/2006/02/Security-Flaw-in-CFAJAX.cfm

Comments (0) | Send | del.icio.us | Linking Blogs | 4107 Views

Related Blog Entries

Comments (Comment Moderation is enabled. Your comment will not appear until approved.)

There are no comments for this entry.

[Add Comment]
BlogCFC was created by Raymond Camden. This blog is running version 5.5.1.