← back
CVE-2007-0817

CVE-2007-0817

EPSS 9.5%
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers to inject arbitrary HTML or web script via the User-Agent HTTP header, which is not sanitized before being displayed in an error page.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/29567unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/32120http://secunia.com/advisories/24115http://www.adobe.com/support/security/bulletins/apsb07-04.htmlhttp://www.securityfocus.com/archive/1/459178/100/0/threadedhttp://www.securityfocus.com/bid/22401http://www.securitytracker.com/id?1017645http://www.vupen.com/english/advisories/2007/0593