Watch your Application and Session scope as I could peek into them.<br /> :: 31, Thursday, March 2005 ::<br /> Well, this is interesting, in CFAUSSIE today a member posted a question as to how he could access another application scope for various reasons (ok it was M@ Bourke).<br /> <br /> A solution was found, one that later on scared the crap out of myself and others. You see, it is possible to snoop someones Application / Session Scope variables in a Coldfusion MX Environment. In that if your on a shared hosting environment, unless they prevent you from using the Coldfusion.runtime.* Java classes you`re basically an open book to all who use the below code:
Comments