Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ColdFusion MX错误页面跨站脚本执行漏洞
Vulnerability Description
Macromedia ColdFusion MX是一款高效的网络应用服务器开发环境，具有很高的易用性和开发效率，基于标准的Java技术。可以与XML、Web Services和Microsoft .NET环境相集成。 Macromedia ColdFusion MX中包含的404错误页面对特殊字符缺少过滤，远程攻击者可能利用此漏洞进行跨站脚本执行攻击。 Macromedia ColdFusion MX默认包含404错误页面，404错误页面在处理不存在.cfm文件时过滤不够充分，攻击者可以构建包含恶意HTM
CVSS Information
N/A
Vulnerability Type
N/A