Description
Adobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against cross-site scripting (XSS) attacks, which allows remote attackers to inject arbitrary web script or HTML via a NULL byte (%00) in certain HTML tags, as demonstrated using "%00script" in a tag.
References
- 21532 vdb-entry
- 1017361 vdb-entry
- 23281 third-party-advisory
- 2021 third-party-advisory
- coldfusion-path-xss(30841) vdb-entry
- ADV-2006-4949 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb07-06.html
- 20061210 [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities mailing-list