CVE-2011-0733

Cross-site scripting XSS vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file...

CVE-2011-0733

CVE-2011-0733 is an XSS vulnerability in Adobe ColdFusion prior to 9.0.1 CHF1. An attacker can inject arbitrary script/HTML via the User-Agent HTTP header when issuing an id=- query to a .cfm file. Root cause details are not provided beyond the description; affected software is Adobe ColdFusion b...