PT-2006-3328 · Macromedia · Macromedia Coldfusion Mx

Zuxncwaruio · Publicado 2006-05-15 · Atualizado 2017-07-20 · CVE-2006-2364

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Macromedia ColdFusion versions 5 and earlier

Description A cross-site scripting (XSS) issue exists in the validation feature, allowing remote attackers to inject arbitrary web script or HTML via a required field. This occurs when the associated normal field is missing or empty and the input is not properly sanitized before being presented in an error message.

Recommendations For Macromedia ColdFusion versions 5 and earlier, consider disabling the validation feature temporarily until a proper fix is available, or ensure that all input fields are properly sanitized to prevent arbitrary script injection.

Exploit

Correção

Identificadores relacionados

CVE-2006-2364

Produtos afetados

Macromedia Coldfusion Mx

Referências · 5

• 🔥 http://securityfocus.com/archive/1/433819 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26508 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2364 · Nota de Segurança
• http://securityfocus.com/bid/17938 · Nota
• http://securityreason.com/securityalert/894 · Nota