There was another one that was activated by adding a "+.htr" to the end of the request. This was known as the htr bug.
Kevin >>> [EMAIL PROTECTED] 07/11/02 05:37PM >>> Kwang Suh wrote: > There used to be an exploit where if you appended something like ":$$DATA" > to your URL, it would give you the source code. Pre SP4 I think. Jochem ______________________________________________________________________ This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting. FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

