Skip to main content

Posts

Showing posts with the label cold fusion

europa.eu - xpath injections

europa.eu is mainly based on cold fusion and Oracle as dbms (via jdbc) The main website is probably proxied via http://yakima.cc.cec.eu.int:6085  (I'm not able to clearly understand all the errors from coldfusion) ------link removed as requested------ I cannot publish the url but it's easy to spot (in my opinion). Note: A few hours with a fuzzer can give you good results. -------