1149 matches found
CVE-2011-2091
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...
Code injection
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2011-2091
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors...
CVE-2011-0629
CVE-2011-0629 documents confirm a cross-site request forgery (CSRF) flaw affecting Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1. The underlying issue enables remote attackers to hijack a user’s authenticated session via unknown vectors. The public materials do not specify the exact attack vectors,...
CVE-2011-0629
Cross-site request forgery CSRF vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
Adobe ColdFusion Admin Requires No Authentication
The version of ColdFusion running on the remote host allows access to its administration pages without authentication. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid53297; scriptversion"1.9";...
Adobe ColdFusion - Directory Traversal
Exploit for windows platform in category remote exploits $Id: coldfusiontraversal.rb 11974 2011-03-16 01:38:16Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...
Adobe ColdFusion - Directory Traversal
$Id: coldfusiontraversal.rb 11986 2011-03-16 10:15:54Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Adobe ColdFusion - Directory Traversal (Metasploit)
$Id: coldfusiontraversal.rb 11974 2011-03-16 01:38:16Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Adobe ColdFusion Cross Site Scripting
http://www.procheckup.com/vulnerabilitymanager/vulnerabilities/pr10-08 PR10-08: Various XSS and information disclosure flaws within Adobe ColdFusion administration console Vulnerability found: 17th April 2010 Vendor informed: 19th April 2010 Vulnerability fixed: 8th February 2011 Severity:...
Adobe ColdFusion login.cfm Query String XSS (APSB11-04)
The version of Adobe ColdFusion running on the remote host has is affected by a cross-site scripting vulnerability in the administrative web interface. Input to the query string of 'administrator/login.cfm' is not properly sanitized before being returned in an HTML response. A remote attacker can...
CVE-2011-0584
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
CVE-2011-0581
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags...
CVE-2011-0582
Unspecified vulnerability in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allows attackers to obtain sensitive information via unknown vectors...
CVE-2011-0580
Multiple cross-site scripting XSS vulnerabilities in the administrator console in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to inject arbitrary web script or HTML via the cfform tag...
Session fixation
Session fixation vulnerability in Adobe ColdFusion 8.0 through 9.0.1 allows remote attackers to hijack web sessions via unspecified vectors...
Crlf injection
Multiple CRLF injection vulnerabilities in Adobe ColdFusion 8.0 through 9.0.1 allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified tags...