Cross site scripting

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related ...

CVE-2013-5326

Adobe ColdFusion versions 9.0 (before Update 12), 9.0.1 (before Update 11), 9.0.2 (before Update 6), and 10 (before Update 12) are vulnerable to a reflected cross-site scripting (XSS) flaw. The issue exists when the CFIDE directory is accessible, allowing remote authenticated users to inject arbi...

CVE-2013-5326: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related ...