CVE-2006-5860

Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:coldfusion:6.1:*:enterprise_server:*:*:*:*:*
cpe:2.3:a:adobe:coldfusion:7.0:*:enterprise_multi-server:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0:sp1:*:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0:sp1a:*:*:*:*:*:*
cpe:2.3:a:adobe:jrun:4.0_build_61650:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-02-14 02:28

Updated : 2024-02-04 17:13


NVD link : CVE-2006-5860

Mitre link : CVE-2006-5860

CVE.ORG link : CVE-2006-5860


JSON object : View

Products Affected

adobe

  • jrun
  • coldfusion
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')