← Back

CVE-2006-2311

nvd nist
Published: Jun 26, 2006Modified: Apr 16, 2026

JSON object

Loading...
2.6
Vector
AV:N/AC:H/Au:N/C:N/I:P/A:N
Exploitability: 4.9 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file, which reflects the result in the default error page.

Affected (2)

New Atlanta Communications
2 products
Bluedragon Server
Bluedragon Server Jx
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Bluedragon Server
Version 6.2.1.286
Bluedragon Server Jx
Version 6.2.1.286

References (8)

Source: PSIRT-CNA@flexerasoftware.com
ExploitVendor Advisory
Source: PSIRT-CNA@flexerasoftware.com
ExploitVendor Advisory
Source: PSIRT-CNA@flexerasoftware.com
Source: PSIRT-CNA@flexerasoftware.com
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.