medium4.3Public exploit code
CVE-2002-1700
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as oth…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ColdFusion MX - Missing Template Cross-Site Scripting2002-06-13 · remote · cfm · Verified
Impact
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macromedia | Coldfusion | Version 6.0 |
| Microsoft | Internet Information Services | Version 5.0 |
| Microsoft | Windows 2000 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://online.securityfocus.com/archive/1/277487
- http://www.macromedia.com/v1/Handlers/index.cfm?ID=23047
- http://www.securityfocus.com/bid/5011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9360
- http://online.securityfocus.com/archive/1/277487
- http://www.macromedia.com/v1/Handlers/index.cfm?ID=23047
- http://www.securityfocus.com/bid/5011
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9360