CVE-2009-1872

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...

CVE-2009-1875

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877...

CVE-2009-1876

Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."...

CVE-2009-1877

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875...

CVE-2009-1878

Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2009-1872

Adobe ColdFusion Server versions 8.0.1, 8, and earlier are vulnerable to multiple cross-site scripting (XSS) vulnerabilities. The root cause is the failure to sufficiently validate or sanitize user-supplied input when processing client HTTP requests, specifically within the query strings and cert...

CVE-2009-1875

CVE-2009-1875 affects Adobe ColdFusion 8.0.1 and earlier. The connected sources confirm multiple cross-site scripting (XSS) vulnerabilities in ColdFusion, where the application fails to sanitize input in various requests (e.g., URL query strings) and can allow remote attackers to inject arbitrary...

CVE-2009-1876

Adobe ColdFusion 8.0.1 and earlier are affected by a double-encoded null character information disclosure vulnerability. A remote attacker can trigger the issue via a specially crafted HTTP request, potentially obtaining sensitive information or source code from the server. The advisory APSB09-12...

CVE-2009-1877

CVE-2009-1877 is described as a cross-site scripting (XSS) vulnerability affecting Adobe ColdFusion 8.0.1 and earlier. The connected sources confirm that ColdFusion in this era could be exploited to inject arbitrary web script or HTML via unspecified vectors, with related advisories and CVEs (e.g...

CVE-2009-1878

CVE-2009-1878 describes a session fixation vulnerability affecting Adobe ColdFusion 8.0.1 and earlier. The issue allows remote attackers to hijack web sessions via unspecified vectors. Provided records confirm the affected software version range and the high-level impact (session hijacking), but ...

CVE-2009-1875

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877...

CVE-2009-1876

Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."...

CVE-2009-1877

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875...

CVE-2009-1878

Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

Adobe Patches 'Critical' ColdFusion, JRun Flaws

Adobe’s never-ending run on the security treadmill hit a new gear this week with the release of patches to cover serious vulnerabilities in the ColdFusion and JRun web design and development platforms. The patches, rated critical, cover a total of 7 vulnerabilities, some of which “could lead to t...

CVE-2009-1876: Undefined Security Weakness

Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."...

CVE-2009-1877: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875...

CVE-2009-1878: Improper Authentication

Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors...

CVE-2009-1872: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to 2 wizards/common/logintowizard.cfm, 3...

CVE-2009-1875: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877...