There was another one that was activated by adding a "+.htr" to the end of the 
request.  This was known as the htr bug.

Kevin

>>> [EMAIL PROTECTED] 07/11/02 05:37PM >>>
Kwang Suh wrote:
> There used to be an exploit where if you appended something like ":$$DATA"
> to your URL, it would give you the source code.

Pre SP4 I think.

Jochem


______________________________________________________________________
This list and all House of Fusion resources hosted by CFHosting.com. The place for 
dependable ColdFusion Hosting.
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to