Adobe ColdFusion Server Load URL Cross-Site Scripting (APSB09-12; CVE-2009-1877)

A Cross Site Scripting XSS vulnerability has been discovered in Adobe ColdFusion server. Adobe ColdFusion is an application server for developing dynamically generated Web sites. A remote attacker could exploit this issue to execute a reflected cross-site scripting attack on web sites using the...

CVE-2009-1877

CVE-2009-1877 is described as a cross-site scripting (XSS) vulnerability affecting Adobe ColdFusion 8.0.1 and earlier. The connected sources confirm that ColdFusion in this era could be exploited to inject arbitrary web script or HTML via unspecified vectors, with related advisories and CVEs (e.g...