CVE-2006-5860

Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0:sp1:*:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0:sp1a:*:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0_build_61650:*:*:*:*:*:*:*

History

21 Nov 2024, 00:20

Type Values Removed Values Added
References () http://osvdb.org/32122 - () http://osvdb.org/32122 -
References () http://secunia.com/advisories/24093 - () http://secunia.com/advisories/24093 -
References () http://www.adobe.com/support/security/bulletins/apsb07-05.html - Patch () http://www.adobe.com/support/security/bulletins/apsb07-05.html - Patch
References () http://www.securityfocus.com/bid/22547 - Patch () http://www.securityfocus.com/bid/22547 - Patch
References () http://www.securitytracker.com/id?1017646 - () http://www.securitytracker.com/id?1017646 -
References () http://www.securitytracker.com/id?1017647 - () http://www.securitytracker.com/id?1017647 -
References () http://www.vupen.com/english/advisories/2007/0594 - () http://www.vupen.com/english/advisories/2007/0594 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/32475 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/32475 -

Information

Published : 2007-02-14 02:28

Updated : 2024-11-21 00:20


NVD link : CVE-2006-5860

Mitre link : CVE-2006-5860

CVE.ORG link : CVE-2006-5860


JSON object : View

Products Affected

adobe

  • jrun
  • coldfusion
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')