CVE-2006-5859: XSS
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote attackers to inject arbitrary HTML and web script via unknown vectors, possibly related to Linkdirect.cfm, Topnav.cfm, and Welcomedoc.cfm.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5859?
The severity of CVE-2006-5859 is considered medium due to its potential for cross-site scripting attacks.
How do I fix CVE-2006-5859?
To fix CVE-2006-5859, enable Global Script Protection in your Adobe ColdFusion MX 7 configurations.
What versions of Adobe ColdFusion are affected by CVE-2006-5859?
CVE-2006-5859 affects Adobe ColdFusion MX 7.0 and 7.0.1.
What types of attacks can CVE-2006-5859 facilitate?
CVE-2006-5859 can facilitate cross-site scripting attacks, allowing attackers to inject arbitrary HTML and web scripts.
What should I do if I cannot upgrade Adobe ColdFusion to mitigate CVE-2006-5859?
If an upgrade is not possible, ensure that Global Script Protection is enabled and review your application for other security best practices.