CVE-2006-5859
4.3
CVSS SCORE
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.
CVSS Vector Details
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None
Affected Software Configurations
- a adobe coldfusion 7.0 * * * * * * *
- a adobe coldfusion 7.0.1 * * * * * * *
Weaknesses (CWE)
- CWE-79
References & External Links
- http://osvdb.org/32121
- http://secunia.com/advisories/24115
- http://www.adobe.com/support/security/bulletins/apsb07-03.html
- http://www.securityfocus.com/bid/22544
- http://www.securitytracker.com/id?1017644
- http://www.vupen.com/english/advisories/2007/0592
- http://osvdb.org/32121
- http://secunia.com/advisories/24115
- http://www.adobe.com/support/security/bulletins/apsb07-03.html
- http://www.securityfocus.com/bid/22544
- http://www.securitytracker.com/id?1017644
- http://www.vupen.com/english/advisories/2007/0592