XSS in Macromedia Coldfusion
CVE-2002-1700
Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.151 (96.4th percentile) — read the EPSS interpretation.
Affected products
- Macromedia Coldfusion — versions 6.0
- Microsoft Internet_information_services — versions 5.0
- Microsoft Windows_2000
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2002-1700?
- CVE-2002-1700 is a vulnerability in Macromedia Coldfusion, classified under Cross-site Scripting. Published 2002-12-31.
- Is CVE-2002-1700 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.