Description

Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.

Remediation

References

CVE-2002-1700

Related Vulnerabilities

Drupal Core 7.x Cross-Site Request Forgery (7.0 - 7.12)

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-8167)

TYPO3 Improper Input Validation Vulnerability (CVE-2011-4904)

Serendipity Other Vulnerability (CVE-2005-1452)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Multiple SQL Injection Vulnerabilities (4.4.3)

Severity

Medium

Classification

CVE-2002-1700 CWE-707

Tags

Missing Update Known Vulnerabilities