2911 matches found
CVE-2006-4726
Cross-site scripting XSS vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page...
CVE-2006-4725
Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components CFC within a sandbox from CFML templates that are located outside of the sandbox...
CVE-2006-4724
Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7.01 allows remote attackers to cause a denial of service infinite loop via unspecified vectors involving a crafted command...
CVE-2006-4725
Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components CFC within a sandbox from CFML templates that are located outside of the sandbox...
CVE-2006-4726
Cross-site scripting XSS vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page...
CVE-2006-4724
CVE-2006-4724 affects the Flash Remoting Gateway of Adobe ColdFusion MX 7 and 7.01. The vulnerability allows remote attackers to cause a denial of service (infinite loop) via crafted, unspecified vectors. The available documents do not provide concrete exploit details, specific affected versions ...
CVE-2006-4725
Adobe ColdFusion MX 7 and 7.01 are affected by an issue that allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates located outside the sandbox. Affected product: ColdFusion MX 7/7.01. Underlying cause: sandbox bypass enabling access to C...
CVE-2006-4726
CVE-2006-4726 concerns a cross-site scripting (XSS) flaw in Adobe ColdFusion MX 6.1 through 7.02. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to a ColdFusion error page. The NVD entry shows a low overall severity (CVSS v2 base s...
[SA21866] ColdFusion Denial of Service and Sandbox Bypass
TITLE: ColdFusion Denial of Service and Sandbox Bypass SECUNIA ADVISORY ID: SA21866 VERIFY ADVISORY: http://secunia.com/advisories/21866/ CRITICAL: Moderately critical IMPACT: Security Bypass, DoS WHERE: From remote SOFTWARE: Macromedia ColdFusion MX 7 http://secunia.com/product/4984/ DESCRIPTION...
Multiple Macromedia Coldfusion security vulnerabilities
DoS, crossite scripting, sandbox escaping...
Macromedia ColdFusion authentication bypass
Some AdminAPI API functionality is available without authentication...
CVE-2006-3979
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator...
CVE-2006-3979
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator...
CVE-2006-3979
CVE-2006-3979 affects ColdFusion MX 7 AdminAPI, where attackers can bypass authentication by using programmatic access to the adminAPI instead of the ColdFusion Administrator. The NVD entry assigns a CVSSv2 base score of 7.2 (HIGH) with local attack vector, low attack complexity, no authenticatio...
ColdFusion Administrative Interface Authentication Bypass
Binary data 3702.prm...
Cross site scripting
Cross-site scripting XSS vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an...
CVE-2006-2364
Cross-site scripting XSS vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an...
CVE-2006-2364
CVE-2006-2364 is an XSS vulnerability affecting Macromedia ColdFusion 5 and earlier. The issue arises in the validation feature: if a related normal field is missing or empty, the _required field is not sanitized before being rendered in an error message, allowing remote script/HTML injection. Th...
CVE-2006-2364
Cross-site scripting XSS vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an...