NetSight
IP …
medium4.3

CVE-2011-0735

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors invol…

Impact

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via vectors involving a "tag script."

Affected products

VendorProductAffected versions
AdobeColdfusion
through 9.0.1
Versions 4.5, 5.0, 6.0, 6.1, 7.0

Weakness classification

CWE-79

References