PT-2005-2534 · Adobe · Coldfusion Mx

Published 2005-05-10 · Updated 2017-07-11 · CVE-2005-1555

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions ColdFusion MX version 7.0

Description A cross-site scripting issue exists due to improper quoting of the URL in the default 404 error page, allowing remote attackers to inject arbitrary script or HTML.

Recommendations For ColdFusion MX version 7.0, ensure that URLs are properly quoted in the resulting default 404 error page to prevent arbitrary script or HTML injection.

Fix

Related Identifiers

CVE-2005-1555

Affected Products

Coldfusion Mx

References · 4

• http://macromedia.com/devnet/security/security_zone/mpsb05-03.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1555 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20550 · Note
• http://marc.info/?l=bugtraq&m=111575500403231&w=2 · Note