PT-2007-1188 · Adobe · Coldfusion Mx 7

Publicado 2007-02-14 · Atualizado 2011-03-08 · CVE-2006-5859

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion MX 7 versions 7.0 through 7.0.1

Description: A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to files such as Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm, when Global Script Protection is not enabled.

Recommendations: For Adobe ColdFusion MX 7 versions 7.0 through 7.0.1, enable Global Script Protection to mitigate the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2006-5859

Produtos afetados

Coldfusion Mx 7

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-5859 · Nota de Segurança
• http://secunia.com/advisories/24115 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5859 · Nota
• http://securityfocus.com/bid/22544 · Nota
• http://osvdb.org/32121 · Nota
• http://securitytracker.com/id?1017644 · Nota
• http://adobe.com/support/security/bulletins/apsb07-03.html · Nota
• http://vupen.com/english/advisories/2007/0592 · Nota