CVE-2001-0535: Macromedia ColdFusion Server

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the "HTTP Host" (CGI.Host) variable in (1) the "Web Publish" example script, and (2) the "Email" example script.

Affected products

• Macromedia ColdFusion Server: version 4.x only

Published 2001-10-30. Last modified 2026-06-16.