PT-2005-2534 · Adobe · Coldfusion Mx

Publicado 2005-05-10 · Atualizado 2017-07-11 · CVE-2005-1555

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ColdFusion MX version 7.0

Description A cross-site scripting issue exists due to improper quoting of the URL in the default 404 error page, allowing remote attackers to inject arbitrary script or HTML.

Recommendations For ColdFusion MX version 7.0, ensure that URLs are properly quoted in the resulting default 404 error page to prevent arbitrary script or HTML injection.

Correção

Identificadores relacionados

CVE-2005-1555

Produtos afetados

Coldfusion Mx

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/20550 · Nota
• http://macromedia.com/devnet/security/security_zone/mpsb05-03.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=111575500403231&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1555 · Nota de Segurança