NVD

Id
65028  
Name
CVE-2006-6483  
Description
Adobe ColdFusion MX 7.x before 7.0.2 does not properly filter HTML tags when protecting against cross-site scripting (XSS) attacks, which allows remote attackers to inject arbitrary web script or HTML via a NULL byte (%00) in certain HTML tags, as demonstrated using "%00script" in a tag.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-12-12  
Modified Date
2011-03-07  
Seq
2006-6483  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339402 65028 CVE-2006-6483 2021  View
339403 65028 CVE-2006-6483 1017361  View
339404 65028 CVE-2006-6483 http://www.adobe.com/support/security/bulletins/apsb07-06.html  View
339405 65028 CVE-2006-6483 20061210 [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities  View
339406 65028 CVE-2006-6483 21532  View
339407 65028 CVE-2006-6483 ADV-2006-4949  View
339408 65028 CVE-2006-6483 coldfusion-path-xss(30841)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59458 JVNDB-2006-001724 Adobe ColdFusion MX における任意の Web スクリプトまたは HTML を挿入される脆弱性 Adobe ColdFusion MX は、クロスサイトスクリプティング攻撃から保護する際、HTML タグを適切にフィルタしないため、任意の Web スクリプトまたは HTML を挿入される脆弱性が存在します。 CVE-2006-6483 22585 CVE-2006-6483 65028 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001724.html 2006-12-12 2012-06-26 View