CVE-2001-0535

CVE-2001-0535 describes a vulnerability in Macromedia ColdFusion Server 4.x, specifically within its example applications. Remote attackers can exploit this by spoofing the "HTTP Host" variable in the "Web Publish" and "Email" example scripts, allowing unauthorized file uploads, reads, or execution. This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, leading to potential partial confidentiality, integrity, and availability impacts. While there's no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the CVE has garnered significant community discussion with 10 mentions.