## Description

The Expression Evaluator sample application in ColdFusion allows remote attackers to read or delete files on the server via exprcalc.cfm, which does not restrict access to the server properly.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### allaire - coldfusion_server

Affected Versions:

- 4.0

## References

- http://www.securityfocus.com/bid/115
  Vendor Advisory
- http://www.securityfocus.com/bid/115
  Vendor Advisory

Neural Processor Active