CVE-2005-1555

3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 57.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Macromedia Coldfusion
Timeline
PublishedMay 10
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7.0 allows remote attackers to inject arbitrary script or HTML via the URL, which is not properly quoted in the resulting default 404 error page.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www.macromedia.com ↗Patch: www.macromedia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-2rxx-5c8g-m33r: Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7↗2022-05-01
▶
CVEList
CVE-2005-1555: Cross-site scripting (XSS) vulnerability in the JRun Web Server in ColdFusion MX 7↗2005-05-14
▶