NVD

Id
64434  
Name
CVE-2006-5859  
Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-02-13  
Modified Date
2011-03-07  
Seq
2006-5859  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
336308 64434 CVE-2006-5859 http://www.adobe.com/support/security/bulletins/apsb07-03.html  View
336309 64434 CVE-2006-5859 22544  View
336310 64434 CVE-2006-5859 1017644  View
336311 64434 CVE-2006-5859 ADV-2007-0592  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51498 JVNDB-2007-000160 ColdFusion におけるクロスサイトスクリプティングの脆弱性 Adobe が提供しているウェブアプリケーション開発ソフトウェアである ColdFusion には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2006-5859 21961 CVE-2006-5859 64434 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000160.html 2007-02-14 2007-04-01 View