Description
Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function.
References
- 29332 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb08-07.html
- ADV-2008-0862 vdb-entry
- 1019590 vdb-entry
- coldfusion-setencoding-xss(41145) vdb-entry
- 28205 vdb-entry