CVEvulnerability
CVE-2006-5860
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-02-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Affected configurations
• adobe coldfusion 6.1
• adobe coldfusion 7.0
• adobe jrun 4.0
• adobe jrun 4.0 build 61650
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/32122 osvdb.org
- http://secunia.com/advisories/24093 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb07-05.html Patch
- http://www.securityfocus.com/bid/22547 Patch
- http://www.securitytracker.com/id?1017646 www.securitytracker.com
- http://www.securitytracker.com/id?1017647 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0594 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32475 exchange.xforce.ibmcloud.com
- http://osvdb.org/32122 osvdb.org
- http://secunia.com/advisories/24093 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb07-05.html Patch
- http://www.securityfocus.com/bid/22547 Patch
- http://www.securitytracker.com/id?1017646 www.securitytracker.com
- http://www.securitytracker.com/id?1017647 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/0594 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32475 exchange.xforce.ibmcloud.com