CVE-2006-5860

Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Date published : 2007-02-13

http://www.securityfocus.com/bid/22547

http://www.adobe.com/support/security/bulletins/apsb07-05.html