https://www.exploit-db.com/exploits/22544
https://cxsecurity.com/issue/WLB-2007100128
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200312-078

MacromediaColdFusionMXServer是一款强大的WEB应用服务程序，可以自动建立站点和WEB应用程序。当ColdFusionMX服务程序接收到畸形URL请求时会返回错误信息，远程攻击者可以利用这些信息进一步对系统进行攻击。默认安装下，MacromediaColdFusionMX服务程序在8500端口启动WEB服务(JRun)，用于管理用途，当服务器接收到http://host:8500/CFIDE/probe.cfm请求时，会返回包含MX服务器安装路径的错误信息，攻击者利用这一信息可以对系统进行进一步攻击。

source: http://www.securityfocus.com/bid/7443/info

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers.

When certain malformed URL requests are received by the server, an error message is returned containing the full path of the ColdFusion installation.

http://host:8500/CFIDE/probe.cfm

来源:XF
名称:coldfusion-mx-path-disclosure(11879)
链接:http://xforce.iss.net/xforce/xfdb/11879
来源:BID
名称:7443
链接:http://www.securityfocus.com/bid/7443
来源:BUGTRAQ
名称:20030426NIIAdvisory-PathDisclosureinColdFusionMXServer
链接:http://www.securityfocus.com/archive/1/319867
来源:www.nii.co.in
链接:http://www.nii.co.in/vuln/pdmac.html
来源:SREASON
名称:3307
链接:http://securityreason.com/securityalert/3307
来源：NSFOCUS
名称：4764
链接：http://www.nsfocus.net/vulndb/4764