Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...

CVE-2009-1872

Adobe ColdFusion Server versions 8.0.1, 8, and earlier are vulnerable to multiple cross-site scripting (XSS) vulnerabilities. The root cause is the failure to sufficiently validate or sanitize user-supplied input when processing client HTTP requests, specifically within the query strings and cert...

CVE-2009-1872: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...