CVE:CVE-2010-2861
CNNVD:CNNVD-201008-134
Adobe ColdFusion是一款高效的网络应用服务器开发环境。
Adobe ColdFusion 9.0.1及之前版本的管理控制台中存在多个目录遍历漏洞。远程攻击者可借助向CFIDE/administrator/中的CFIDE/administrator/settings/mappings.cfm，logging/settings.cfm，datasources/index.cfm，j2eepackaging/editarchive.cfm和enter.cfm发送的locale参数读取任意文件。
solution:Upgrade adobe coldfusion to a higher version than 9.0.1,8.0,8.0.1,9.0,and avoid the version (,9.0.1],8.0,8.0.1,9.0