CVE-2009-1872

Published: Aug 18, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.

Affected (21)

Products: Adobe: Coldfusion

Adobe

1 product

Coldfusion

Configuration A

21 vulnerable

Vulnerable Software	Affected Versions
Adobe Coldfusion	Up to 8.0.1
Adobe Coldfusion	Version 6.0
Adobe Coldfusion	Version 6.0
Adobe Coldfusion	Version 6.0
Adobe Coldfusion	Version 6.0
Adobe Coldfusion	Version 6.0
Adobe Coldfusion	Version 6.1
Adobe Coldfusion	Version 6.1
Adobe Coldfusion	Version 6.1
Adobe Coldfusion	Version 6.1
Adobe Coldfusion	Version 6.1
Adobe Coldfusion	Version 7.0.1
Adobe Coldfusion	Version 7.0.2
Adobe Coldfusion	Version 7.0
Adobe Coldfusion	Version 7.0
Adobe Coldfusion	Version 7.0
Adobe Coldfusion	Version 7.0
Adobe Coldfusion	Version 7.0
Adobe Coldfusion	Version 7.2 unknown
Adobe Coldfusion	Version 8.0
Adobe Coldfusion	Version 8.1