Macromedia ColdFusion Fusebox 4.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:macromedia:coldfusion_fusebox:4.1.0:*:*:*:*:*:*:*
part: a version: 4.1.0 update: *
| Vendor | Macromedia (f00ebe2b-9d72-52ca-9cf0-be998a2cdfa0) |
|---|---|
| Product | Coldfusion Fusebox (212ed497-692b-5371-bcbd-fb16e0e9c40f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2005-2481 |
vulnerable | 2026-06-03 14:27:02.183689 |
Details available
ColdFusion Fusebox 4.1.0 allows remote attackers to obtain sensitive information via an invalid fuseaction parameter, which leaks the full server path in an error message, as demonstrated using the "?" (question mark) character.
Published: 2005-08-05T04:00:00.000Z
Updated: 2024-08-07T22:30:01.748Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2480 |
vulnerable | 2026-06-03 14:27:02.183353 |
Details available
Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not quoted in an error page, as demonstrated using index.cfm.
Published: 2005-08-05T04:00:00.000Z
Updated: 2024-08-07T22:30:00.686Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.