CVE

Id
48646  
CVE No.
CVE-2011-0734  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack. NOTE: this was originally reported as affecting 9.0.1 CHF1 and earlier.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528952 48646 CVE-2011-0734 FULLDISC:20110128 Vulnerabilities in Adobe ColdFusion  View
528953 48646 CVE-2011-0734 URL:http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html  View
528954 48646 CVE-2011-0734 MISC:http://websecurity.com.ua/4879/  View
528955 48646 CVE-2011-0734 CONFIRM:http://kb2.adobe.com/cps/890/cpsid_89094.html  View
528956 48646 CVE-2011-0734 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb11-04.html  View
528957 48646 CVE-2011-0734 OSVDB:70778  View
528958 48646 CVE-2011-0734 URL:http://osvdb.org/70778  View
528959 48646 CVE-2011-0734 SECTRACK:1025012  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33989 JVNDB-2011-004231 Ruby Mail gem の sendmail delivery agent の deliver 関数における任意のコマンドを実行される脆弱性 Ruby Mail gem の sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) の deliver 関数には、任意のコマンドを実行される脆弱性が存在します。 CVE-2011-0739 48646 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004231.html  View