What’s Vulnerable › Vulnerabilities

CVE-2005-4343

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-12-19 · updated 2026-06-16

Description

Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability".

Affected products

• Macromedia Coldfusion: 6.0, 6.1, 7.0

References

• http://secunia.com/advisories/18078
• http://securitytracker.com/id?1015369
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html
• http://www.securityfocus.com/bid/15904
• http://www.vupen.com/english/advisories/2005/2948
• http://secunia.com/advisories/18078
• http://securitytracker.com/id?1015369
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-12.html
• http://www.macromedia.com/devnet/security/security_zone/mpsb05-14.html
• http://www.securityfocus.com/bid/15904
• http://www.vupen.com/english/advisories/2005/2948

Get alerted when CVE-2005-4343 or the next vulnerability affects your stack