medium4.3Public exploit code
CVE-2005-2480
Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fusebox 4.1 - 'index.cfm' Cross-Site Scripting2005-08-03 · webapps · cfm · Verified
Impact
Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not quoted in an error page, as demonstrated using index.cfm.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Macromedia | Coldfusion Fusebox | Version 4.1.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=112309656102615&w=2
- http://secunia.com/advisories/16320
- http://www.securityfocus.com/bid/14460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21697
- http://marc.info/?l=bugtraq&m=112309656102615&w=2
- http://secunia.com/advisories/16320
- http://www.securityfocus.com/bid/14460
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21697