CVE-2002-1700

Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as…

published June 21, 2005

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.24274 · 97.8th percentile
Published
2005-06-21T04:00Z
EPSS history
Timeline
  • 21 JUN 04:00Z
    Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as…
    cvelistv5