Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2015-0345

Published: 15/04/2015 Updated: 04/09/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 10 before Update 16 and 11 before Update 5 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

adobe coldfusion

Github Repositories

https://github.com/BishopFox/coldfusion-10-11-xss

Proof of Concept code for CVE-2015-0345 (APSB15-07)

ColdFusion 10x 11x XSS -> RCE PoC Exploits This repo contains XSS vectors for CVE-2015-0345 (APSB15-07) that allow for the ability to gain remote command execution on ColdFusion installations This exploit is only valid for ColdFusion 10 and 11 installations Specifically, ColdFusion 11, Update 11 and ColdFusion 10, Update 16 fixes both of these issues More informatio

References

CWE-79https://helpx.adobe.com/security/products/coldfusion/apsb15-07.htmlhttp://www.securitytracker.com/id/1032106https://nvd.nist.govhttps://github.com/BishopFox/coldfusion-10-11-xss
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectCVE-2024-34001CVE-2024-37018LFICVE-2024-1275CVE-2024-1086CSRFCVE-2024-31030CVE-2024-24919
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook