CVE-2011-0735

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:coldfusion:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:8.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:7.0.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:5.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:4.5:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:*:chf1:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:6.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:6.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:8.1:*:*:*:*:*:*:*

Information

Published : 2011-02-01 10:00

Updated : 2011-11-07 20:18


NVD link : CVE-2011-0735

Mitre link : CVE-2011-0735


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

adobe

  • coldfusion