CVE

Id
48648  
CVE No.
CVE-2011-0736  
Status
Candidate  
Description
** DISPUTED ** Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web application is configured to use a DBMS, allows remote attackers to obtain potentially sensitive information about the database structure via an id=- query to a .cfm file. NOTE: the vendor disputes the significance of this issue because the Site-wide Error Handler and Debug Output Settings sections of the ColdFusion Lockdown guide explain the requirement for settings that prevent this information disclosure.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528966 48648 CVE-2011-0736 FULLDISC:20110128 Vulnerabilities in Adobe ColdFusion  View
528967 48648 CVE-2011-0736 URL:http://archives.neohapsis.com/archives/fulldisclosure/2011-01/0537.html  View
528968 48648 CVE-2011-0736 MISC:http://websecurity.com.ua/4879/  View
528969 48648 CVE-2011-0736 OSVDB:70780  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33991 JVNDB-2011-004233 ModX Evolution におけるクロスサイトスクリプティングの脆弱性 ModX Evolution には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-0741 48648 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004233.html  View