CVE

Id
70160  
CVE No.
CVE-2014-2865  
Status
Candidate  
Description
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a "" character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a ColdFusion installation.  
Phase
Assigned (20140415)  
Votes
None (candidate not yet proposed)  
Comments