Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page.
References
- 21858 third-party-advisory
- 19982 vdb-entry
- coldfusion-errorpage-xss(28922) vdb-entry
- ADV-2006-3575 vdb-entry
- 1016833 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb06-14.html