CVE-2010-1293
13.05.2010, 17:30
Cross-site scripting (XSS) vulnerability in the Administrator page in Adobe ColdFusion 8.0, 8.0.1, and 9.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| adobe | coldfusion | 𝑥 ≤ 9.0 |
| adobe | coldfusion | 4.5 |
| adobe | coldfusion | 5.0 |
| adobe | coldfusion | 6.0 |
| adobe | coldfusion | 6.1 |
| adobe | coldfusion | 7.0 |
| adobe | coldfusion | 7.0.1 |
| adobe | coldfusion | 7.0.2 |
| adobe | coldfusion | 7.2:unknown |
| adobe | coldfusion | 8.0 |
| adobe | coldfusion | 8.0.1 |
𝑥
= Vulnerable software versions
References