Not surprising, yet another ColdFusion exploit

  • May 9, 2013
  • David Epler

So there has been yet another 0-day found that can exploit ColdFusion by not having directories within CFIDE properly secured as noted in APSA13-03 from Adobe. If you haven’t properly secured CFIDE that is public facing, it is only a matter of time until it gets hacked. The previous two that were found in January and April of this year should have been motivation enough.

Read More

Subversion Auto Properties

  • May 16, 2009
  • David Epler

At cf.Objective() I attended Subversion for Smarties - Do More With Subversion given by Cameron Childress and it was a good presentation. I picked up a few things that I didn’t know before like changelists which were added in Subversion 1.5. The presentation did cover other things like svn properties on files like svn:keywords and how to add them with svn propset. While svn propset works, it is possible to set svn properties on files globally on the create of the file without having to manually setting them. This is done my modifying the subversion client configuration.

Read More