An example application in ColdFusion Server 4.0 allows remote attackers to view source code via the sourcewindow.cfm file.Referenceshttp://www.allaire.com/handlers/index.cfm?ID=8739&Method=Full