CVE-2006-2311

Affected product: BlueDragon Server / Server JX 6.2.1.286 for Windows. Vulnerability: Cross-site scripting (XSS) via the filename parameter in requests to .cfm or .cfml files, reflected in the default error page. Root cause: the input is not properly sanitized in the filename handling. Impact: re...