CVE-2013-5326: XSS
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5326?
CVE-2013-5326 has a medium severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2013-5326?
To fix CVE-2013-5326, update Adobe ColdFusion to the latest version or apply the specific updates mentioned in the advisory.
Who is affected by CVE-2013-5326?
CVE-2013-5326 affects Adobe ColdFusion versions 9.0, 9.0.1, 9.0.2, and 10 prior to Update 12.
Can CVE-2013-5326 be exploited remotely?
Yes, CVE-2013-5326 can be exploited remotely by authenticated users to inject malicious scripts.
What types of attacks are possible with CVE-2013-5326?
CVE-2013-5326 allows for cross-site scripting (XSS) attacks, enabling the injection of arbitrary web scripts or HTML.