CVE

Id
48645  
CVE No.
CVE-2011-0733  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header in an id=- query to a .cfm file.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528944 48645 CVE-2011-0733 FULLDISC:20110128 Vulnerabilities in Adobe ColdFusion  View
528945 48645 CVE-2011-0733 URL:http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html  View
528946 48645 CVE-2011-0733 MISC:http://websecurity.com.ua/4879/  View
528947 48645 CVE-2011-0733 CONFIRM:http://kb2.adobe.com/cps/890/cpsid_89094.html  View
528948 48645 CVE-2011-0733 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb11-04.html  View
528949 48645 CVE-2011-0733 OSVDB:70777  View
528950 48645 CVE-2011-0733 URL:http://osvdb.org/70777  View
528951 48645 CVE-2011-0733 SECTRACK:1025012  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33988 JVNDB-2011-004230 Globus Toolkit で使用される MyProxy におけるサーバを偽装される脆弱性 Globus Toolkit で使用される MyProxy は、ホスト名または X.509 証明書内の識別子を適切に検証しないため、サーバを偽装される、および中間者攻撃を誘発する脆弱性が存在します。 CVE-2011-0738 48645 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004230.html  View