medium6.1Public exploit code
CVE-2016-7851
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Connect 9.5.7 - Cross-Site Scripting2016-11-09 · webapps · windows · Verified
Impact
Adobe Connect version 9.5.6 and earlier does not adequately validate input in the events registration module. This vulnerability could be exploited in cross-site scripting attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Connect | through 9.5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94152
- http://www.securitytracker.com/id/1037239
- https://helpx.adobe.com/security/products/connect/apsb16-35.html
- https://www.exploit-db.com/exploits/40742/
- http://www.securityfocus.com/bid/94152
- http://www.securitytracker.com/id/1037239
- https://helpx.adobe.com/security/products/connect/apsb16-35.html
- https://www.exploit-db.com/exploits/40742/