IL, DoS и FPD уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых уязвимостях в Adobe ColdFusion. Это Information Leakage, Denial of Service и Full path disclosure уязвимости. Information Leakage WASC-13: http://site/CFIDE/componentutils/packagelist.cfm Утечка списка всех компонентов установленных на серве...

Adobe ColdFusion Multiple Path Disclosure Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplepathdiscvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Adobe ColdFusion Multiple Path Disclosure Vulnerabilities Authors: Sooraj KS Copyright:...

Adobe ColdFusion Multiple Path Disclosure Vulnerabilities (Nov 2011)

Adobe ColdFusion is prone to multiple path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe ColdFusion 9 Denial Of Service

Hello list! I want to warn you about new security vulnerabilities in Adobe ColdFusion. In addition to multiple holes, which I've informed earlier. These are Information Leakage, Denial of Service and Full path disclosure vulnerabilities. ------------------------- Affected products:...

XSS и FPD уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых уязвимостях в Adobe ColdFusion. Это Cross-Site Scripting и Full path disclosure уязвимости. XSS WASC-08: http://site/CFIDE/componentutils/componentdetail.cfm?component=3Cbody20onload=alertdocument.cookie3E...

Adobe ColdFusion Multiple Cross Site Scripting Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplexssvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ Adobe ColdFusion Multiple Cross Site Scripting Vulnerabilities Authors: Sooraj KS...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities

The host is running Adobe ColdFusion and is prone to multiple full path disclosure vulnerabilities. OpenVAS Vulnerability Test $Id: secpodadobecoldfusionmultiplefpdvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities Authors: Sooraj KS...

Adobe ColdFusion Multiple Full Path Disclosure Vulnerabilities (Sep 2011)

Adobe ColdFusion is prone to multiple full path disclosure vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe ColdFusion Multiple XSS Vulnerabilities (Sep 2011)

Adobe ColdFusion is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe ColdFusion 7 Cross Site Scripting

Hello list! I want to warn you about new security vulnerabilities in Adobe ColdFusion. These are Cross-Site Scripting and Full path disclosure vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are Adobe ColdFusion 7 and previous versions to XSS, an...

Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities

Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49787/info Adobe ColdFusion is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit...

Adobe ColdFusion 7 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/49787/info Adobe ColdFusion is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the contex...

Adobe ColdFusion 'probe.cfm'跨站脚本漏洞

Bugtraq ID: 49220 Adobe ColdFusion是一款高效的网络应用服务器开发环境。 Adobe ColdFusion probe.cfm不正确过滤用户提交的参数，攻击者可以进行跨站脚本攻击，可获得敏感信息或劫持用户会话。 0 Adobe ColdFusion 目前没有详细解决方案提供： http://www.adobe.com/products/coldfusion/ http://ssvdb.com/CFIDE/probe.cfm?name=scriptalert"G.R0b1n"/script...

ColdFusion probe.cfm Cross Site Scripting

Describe£ºColdFusion probe.cfm page local parameter can xss CVE£ºUnknow PoC£º http://127.0.0.1/CFIDE/probe.cfm?name=alert"G.R0b1n" URL.Name parameter can xss only local. Or visit: http://www.focusecurity.org/2011/08/ColdFusion-Local-Parameter-Xss-Exploit.html...

Adobe ColdFusion - probe.cfm Cross-Site Scripting

Adobe ColdFusion - probe.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/49220/info Adobe ColdFusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could exploit this vulnerability to execute arbitrary...

Adobe ColdFusion - 'probe.cfm' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49220/info Adobe ColdFusion is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker could exploit this vulnerability to execute arbitrary script code in the context of the affected website...

Adobe ColdFusion Multiple Vulnerabilities (APSB11-04) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist in the ColdFusion administrator console. CVE-2011-0580 - Multiple CRLF injection vulnerabilities in various tags allow adding headers...

Adobe ColdFusion Multiple Vulnerabilities (APSB11-14) (credentialed check)

The version of Adobe ColdFusion running on the remote Windows host is affected by an unspecified cross-site request forgery XSRF vulnerability and a denial of service DoS vulnerably. Versions 8, 8.0.1, 9, and 9.0.1 are affected. A remote attacker can exploit the XSRF vulnerability by tricking a...

Adobe ColdFusion Remote Development Services Enabled Without Authentication

ColdFusion's Remote Development Services allow developers to use IDEs such as Dreamweaver to manage applications. The remote host has RDS enabled without authentication. This means that a remote attacker can read and write files on the affected system. %NASLMINLEVEL 70300 C Tenable Network...

ColdFusion Installed on Microsoft Windows (credentialed check)

Adobe ColdFusion formerly Macromedia ColdFusion, a rapid application development platform, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid55514; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate",...