QwikSec

Security Database

CVE

CWE

Training

CVE-2011-0734

Published: Feb 1, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion before 9.0.1 CHF1 allows remote attackers to inject arbitrary web script or HTML via an id parameter containing a JavaScript onLoad event handler for a BODY element, related to a "tag body" attack. NOTE: this was originally reported as affecting 9.0.1 CHF1 and earlier.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_OSVDB

http://websecurity.com.ua/4879/

x_refsource_MISC

http://kb2.adobe.com/cps/890/cpsid_89094.html

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

http://www.adobe.com/support/security/bulletins/apsb11-04.html

x_refsource_CONFIRM

20110128 Vulnerabilities in Adobe ColdFusion

mailing-list

x_refsource_FULLDISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.