CVE-2014-0570

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Design/Logic Flaw

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0572

Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows local users to bypass intended IP-based access restrictions via unspecified vectors...

CVE-2014-0572

CVE-2014-0572 affects Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2. The issue is a security permissions problem that allows a local, unauthenticated user to bypass IP-based access restrictions. Connected sources ...

CVE-2014-0570

CVE-2014-0570 is a Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 that allows remote attackers to hijack the authentication of unspecified victims via unknown vect...

CVE-2014-0570

Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-0571

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-0571

CVE-2014-0571 is a cross-site scripting (XSS) vulnerability in Adobe ColdFusion . The affected releases are: ColdFusion 9.0 before Update 13, 9.0.1 before Update 12, 9.0.2 before Update 7, 10 before Update 14, and 11 before Update 2. Attackers can exploit unspecified vectors to inject arbitrary w...

Adobe ColdFusion Multiple Vulnerabilities (APSB14-23) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by the following vulnerabilities : - An unspecified cross-site request forgery vulnerability exists because ColdFusion does not properly sanitize user-supplied input. CVE-2014-0570 - An unspecified cross-site scripting...

Adobe Releases Security Updates for ColdFusion and Flash Player

Adobe has released security updates to address multiple vulnerabilities in ColdFusion and Flash Player. Exploitation could allow attackers to take control of a vulnerable system. Users and administrators are encouraged to review Adobe Security Bulletins APSB 14-23 and APSB 14-22 and apply the...

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-5315

CVE-2014-5315 affects Adobe products via an XSS in the Help page. Affected: Adobe Acrobat <= 9.5.2 (Mac/Windows) and Adobe ColdFusion

CVE-2014-5315

Cross-site scripting XSS vulnerability in the Help page in Adobe Acrobat 9.5.2 and earlier and ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

JVN#84376800: Help Page in multiple Adobe products vulnerable to cross-site scripting

The Help page provided in multiple Adobe products contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version of the product according to the information provided by the developer...

WordPress ColdFusion Theme - Arbitrary File Upload

WordPress ColdFusion theme is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the theme...

CF_Nuke 4.6 Index.CFM Local File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15777/info CFNuke is prone to a local file include vulnerability. This is due to a lack of sanitization of user-supplied input. This may facilitate the unauthorized viewing of files and unauthorized execution of local...

Adobe ColdFusion 6/7 User_Agent Error Page Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22401/info Adobe ColdFusion is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker could exploit this vulnerability to execute arbitrary script code in t...