PT-2010-1184

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 9.0.1 and earlier Description The issue allows remote attackers to read arbitrary files due to directory traversal vulnerabilities in the administrator console. This is achieved via the locale parameter to various...

ColdFusion Research

ColdFusion Research Results 1 - 10 of about 1,170,000,000 for inurl:"index.cfm". Tableofcontents ...Introduction ...About ...Version ...CFML ...Database ...XSS ...SQL-Inj ...Include ...Admin ...CMD ...Bugs ...Encrypt/Decrypt ...Security ...SQL-Dumper ...Web-Shell ...MIME types Spoofing...

Fusebox SQL Injection

----------------------------------------------------------------------------------------- AJSADVISORIES01&2010 fusebox ProductList.cfm?CatDisplay Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : Shamus Date : May...

fusebox - ProductList.cfm?CatDisplay SQL Injection

fusebox - ProductList.cfm?CatDisplay SQL Injection ----------------------------------------------------------------------------------------- AJSADVISORIES01&2010 fusebox ProductList.cfm?CatDisplay Remote SQL Injection Vulnerability...

fusebox (ProductList.cfm?CatDisplay) Remote SQL Injection Vulnerability

Exploit for windows platform in category web applications ======================================================================= fusebox ProductList.cfm?CatDisplay Remote SQL Injection Vulnerability ======================================================================= Author : Shamus Date : Ma...

fusebox - 'ProductList.cfm?CatDisplay' SQL Injection

----------------------------------------------------------------------------------------- AJSADVISORIES01&2010 fusebox ProductList.cfm?CatDisplay Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : Shamus Date : May...

Adobe ColdFusion 'cfadminUserId' XSS (APSB10-11)

The version of Adobe ColdFusion running on the remote host is affected by a cross-site scripting vulnerability in the administrative web interface. Input to the 'cfadminUserId' parameter of '/CFIDE/administrator/login.cfm' is not properly sanitized. This vulnerability is present when the 'Separat...

CVE-2010-1294

Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors...

CVE-2010-1293

Cross-site scripting XSS vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-3467

Cross-site scripting XSS vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Code injection

Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors...

CVE-2009-3467

Cross-site scripting XSS vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2009-3467

CVE-2009-3467 affects Adobe ColdFusion 8.0, 8.0.1, and 9.0, with an unspecified method vulnerability enabling cross-site scripting that lets an attacker inject arbitrary script via unknown vectors. Public details indicate risk is tied to XSS in the ColdFusion server; the exact exploit vectors are...

CVE-2010-1294

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2010-1294

Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors...

CVE-2010-1293

Cross-site scripting XSS vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-1293

Adobe ColdFusion CVE-2010-1293 is an XSS vulnerability affecting the Admin page in ColdFusion 8.0, 8.0.1, and 9.0. The issue arises from improper sanitization in the administrative interface, notably input to cfadminUserId on /CFIDE/administrator/login.cfm when Separate user name and password aut...

Preemptive Protection against Adobe ColdFusion Multiple Cross-Site Scripting Vulnerabilities (APSB10-11)

Multiple cross-site scripting XSS vulnerabilities have been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. Cross-site scripting occurs when a Web-based application fails to validate user input before returning it to...

Adobe Patches 'Critical' Shockwave, ColdFusion holes

Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines. According to the APSB10-12 security bulletin, 18 of the 21 flaws affected the Shockwave Player, a free software product that le...