229436d8_curity_Updates___Core_Security__Description
[Released Date] 07.21.2014 [Title] Adobe ColdFusion l10n.cfm Remote Code Execution Exploit [Vulnerabilty] CVE-2013-3336 [Category] Exploits/Remote [Platform] Windows, Linux [Description] 
The /CFIDE/adminapi/customtags/l10n.cfm page in Adobe ColdFusion does not properly validate its attributes.file parameter. This can be abused by a remote unauthenticated attacker to execute arbitrary code on vulnerable servers.
Core Impact Pro Exploits and Security Updates | Core Security