coldfusion-10-11-xss

ColdFusion 10.x 11.x XSS - RCE Exploit PoC Questo repository contiene vettori XSS per CVE-2015-0345 APSB15-07 che consentono di ottenere l'esecuzione remota di comandi su installazioni ColdFusion. Questo exploit è valido solo per installazioni ColdFusion 10 e 11. Nello specifico, ColdFusion 11,...

ColdFusion explosion: from XSS to RCE chain reaction-vulnerability warning-the black bar safety net

In the audit of ColdFusion 1 0 and 1 1 of the admin panel, I found a DOM based cross-site scripting vulnerability. In this article I will show you how to exploit the vulnerability from the ColdFusion application server to get remote code execution. The discovery of this vulnerability, I to the...

CVE-2015-0345

Cross-site scripting XSS vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...