Coldfusion@7.0.1 Security Vulnerabilities and Issues — Coldfusion@7.0.1 CVE List

Lucene search

AdobeColdfusion7.0.1

2 matches found

CVE•added 2007/02/07 11:28 a.m.•69 views

CVE-2007-0817

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.

4.3CVSS5.7AI score0.04853EPSS

CVE•added 2007/02/14 1:28 a.m.•33 views

CVE-2006-5859

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.

4.3CVSS5.8AI score0.02799EPSS