coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS - RCE PoC Exploits Este repositorio contiene vectores XSS para el CVE-2015-0345 APSB15-07 que permiten obtener ejecución remota de comandos en instalaciones de ColdFusion. Este exploit solo es válido para instalaciones de ColdFusion 10 y 11. Específicamente, ColdFusion 11...

ColdFusion explosion: from XSS to RCE chain reaction-vulnerability warning-the black bar safety net

In the audit of ColdFusion 1 0 and 1 1 of the admin panel, I found a DOM based cross-site scripting vulnerability. In this article I will show you how to exploit the vulnerability from the ColdFusion application server to get remote code execution. The discovery of this vulnerability, I to the...

CVE-2015-0345

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...