Macromedia ColdFusion MX application server crossite scripting

Crossite scripting with error pages...

CVE-2005-4708: Undefined Security Weakness

Adobe Macromedia MX 2004 products, Captivate, Contribute 2, Contribute 3, and eLicensing client install the Macromedia Licensing Service with the Users group permitted to configure the service, including the path to executable, which allows local users to execute arbitrary code as Local System...

ColdFusion < 7.01 MX Multiple Vulnerabilities

Binary data 3330.prm...

CVE-2005-4343

Adobe formerly Macromedia ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability"...

CVE-2005-4344

CVE-2005-4344 affects Adobe ColdFusion MX 7.0. The root cause is that the CFOBJECT /CreateObject(Java) configuration is not honored when disabled, allowing local users to create an object despite the setting. The NVD data indicates a low overall risk (CVSS v2 base score 2.1) with local attack vec...

CVE-2005-4343: Undefined Security Weakness

Adobe formerly Macromedia ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 allows remote attackers to attach arbitrary files and send mail via a crafted Subject field, which is not properly handled by the CFMAIL tag in applications that use ColdFusion, aka "CFMAIL injection Vulnerability"...

CVE-2005-4345: Undefined Security Weakness

Adobe formerly Macromedia ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, which allows local developers to obtain the hash and gain privileges...

CVE-2005-4344: Undefined Security Weakness

Adobe formerly Macromedia ColdFusion MX 7.0 does not honor when the CFOBJECT /CreateObjectJava setting is disabled, which allows local users to create an object despite the specified configuration...

CVE-2005-3958

SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idcat parameter in a showcat action and 2 the action parameter...

CVE-2005-3958

The CVE-2005-3958 entry identifies a SQL injection vulnerability in Entergal MX 2.0, specific to index.php via the (1) idcat parameter in a showcat action and (2) the action parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the web i...

CVE-2005-3958

SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idcat parameter in a showcat action and 2 the action parameter...

CVE-2005-3958: Undefined Security Weakness

SQL injection vulnerability in index.php in Entergal MX 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 idcat parameter in a showcat action and 2 the action parameter...

CVE-2005-3901

CVE-2005-3901 affects Macromedia Flash Communication Server MX 1.0 and 1.5, where certain RTMP data is not properly validated, enabling a denial of service (instability or crash). The vulnerability is demonstrated using an alpha release build of Flash Player 8.5 (build 133). The connected documen...

Entergal MX 2.0 - Multiple SQL Injections

Entergal MX 2.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/15631/info Entergal MX is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

CVE-2005-3901: Undefined Security Weakness

Macromedia Flash Communication Server MX 1.0 and 1.5 does not sufficiently validate certain RTMP data, which allows attackers to cause a denial of service instability or crash, as demonstrated using an alpha release build of Flash Player 8.5 build 133...

Entergal MX V2.0 SQL vuln.

Entergal MX V2.0 SQL vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html Vendor:www.entergal.com affected version: v2.0 and prior Product description: Entergal Directory MX for PHP is the ultimate solution for making...

Macromedia ColdFusion MX Path Disclosure Vulnerability

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. SPDX-FileCopyrightText: 2003 A.D.Consulting France Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Macromedia ColdFusion MX Path Disclosure Vulnerability

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. OpenVAS...

CVE-2004-2505

CVE-2004-2505 affects Macromedia ColdFusion MX prior to 6.1. The issue arises because error messages are not restricted in size, which can be exploited to cause a denial of service through repeated GET/POST requests that trigger large error outputs. The provided documents specify the affected pro...

CVE-2004-2505: Undefined Security Weakness

Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service memory consumption and crash by sending repeated GET or POST requests that trigger error messages that use long strings of data...