Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown

CVE-2010-1294

Disclosure Date: May 13, 2010 (last updated October 04, 2023)
Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows local users to obtain sensitive information via unknown vectors.
0
0
Attacker Value
Unknown

CVE-2010-1293

Disclosure Date: May 13, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2009-3467

Disclosure Date: May 13, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in an unspecified method in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
0
0
Attacker Value
Unknown

CVE-2009-1878

Disclosure Date: August 18, 2009 (last updated October 04, 2023)
Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2009-1876

Disclosure Date: August 18, 2009 (last updated October 04, 2023)
Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."
0
0
Attacker Value
Unknown

CVE-2009-1875

Disclosure Date: August 18, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877.
0
0
Attacker Value
Unknown

CVE-2009-1872

Disclosure Date: August 18, 2009 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
0
0
Attacker Value
Unknown

CVE-2009-1877

Disclosure Date: August 18, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875.
0
0
Attacker Value
Unknown

CVE-2008-4831

Disclosure Date: November 10, 2008 (last updated October 04, 2023)
Unspecified vulnerability in Adobe ColdFusion 8 and 8.0.1 and ColdFusion MX 7.0.2 allows local users to bypass sandbox restrictions, and obtain sensitive information or possibly gain privileges, via unknown vectors.
0
0