CVE-2005-4343: Macromedia ColdFusion

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".

Affected products

• Macromedia ColdFusion: version 6.0 only; version 6.1 only; version 7.0 only

Published 2005-12-19. Last modified 2026-06-16.