CVE-2014-0571

CVE-2014-0571 is a cross-site scripting (XSS) vulnerability in Adobe ColdFusion . The affected releases are: ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2. Attackers can exploit unspecified vectors to inject arbitrary w...

CVE-2014-0570

CVE-2014-0570 is a Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 that allows remote attackers to hijack the authentication of unspecified victims via unknown vect...

PT-2014-3677

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion version 9.0 before Update 13 Adobe ColdFusion version 9.0.1 before Update 12 Adobe ColdFusion version 9.0.2 before Update 7 Adobe ColdFusion version 10 before Update 14 Adobe ColdFusion version 11 before Update 2 Description A...

Adobe ColdFusion Multiple Vulnerabilities (APSB14-23) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by the following vulnerabilities : - An unspecified cross-site request forgery vulnerability exists because ColdFusion does not properly sanitize user-supplied input. CVE-2014-0570 - An unspecified cross-site scripting...

CVE-2014-0572: Undefined Security Weakness

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors...

CVE-2014-0570: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

PT-2014-3678

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 9.0 before Update 13 Adobe ColdFusion 9.0.1 before Update 12 Adobe ColdFusion 9.0.2 before Update 7 Adobe ColdFusion 10 before Update 14 Adobe ColdFusion 11 before Update 2 Description A cross-site scripting XSS issue allows...

CVE-2014-0571: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-3679

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0 through 9.0 before Update 13 Adobe ColdFusion versions 9.0.1 through 9.0.1 before Update 12 Adobe ColdFusion versions 9.0.2 through 9.0.2 before Update 7 Adobe ColdFusion versions 10 through 10 before Update 14...

Adobe Releases Security Updates for ColdFusion and Flash Player

Adobe has released security updates to address multiple vulnerabilities in ColdFusion and Flash Player. Exploitation could allow attackers to take control of a vulnerable system. Users and administrators are encouraged to review Adobe Security Bulletins APSB 14-23 and APSB 14-22 and apply the...

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5315

CVE-2014-5315 affects Adobe products via an XSS in the Help page. Affected: Adobe Acrobat <= 9.5.2 (Mac/Windows) and Adobe ColdFusion

CVE-2014-5315: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-6399

Name of the Vulnerable Software and Affected Versions Adobe Acrobat versions 9.5.2 and earlier ColdFusion versions 8.0.1 and earlier Description A cross-site scripting XSS issue exists in the Help page of the affected software, allowing remote attackers to inject arbitrary web script or HTML...

JVN#84376800: Help Page in multiple Adobe products vulnerable to cross-site scripting

The Help page provided in multiple Adobe products contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version of the product according to the information provided by the developer...

WordPress ColdFusion Theme - Arbitrary File Upload

WordPress ColdFusion theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the theme...

Allaire ColdFusion Server <= 4.0 - Remote File Display, Deletion, Upload and Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/115/info To display and delete any file on the system use an URL of the following form: http://www.victim.test/cfdocs/expeval/ExprCalc.cfm?OpenFilePath=C:\the\target\file To upload files to the sever first find out the...

Macromedia ColdFusion MX 6.1 Template Handling Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11316/info Reportedly Macromedia ColdFusion MX is affected by privilege escalation vulnerability when handling templates. This issue is due to an access validation error that allows a user to perform actions with...