Macromedia Dreamweaver MX/DRK/UltraDev Server Behavior Cross-Site Scripting Vulnerabilities
BID:8450
Info
Macromedia Dreamweaver MX/DRK/UltraDev Server Behavior Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 8450 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 19 2003 12:00AM |
| Updated: | Aug 19 2003 12:00AM |
| Credit: | These issues were announced by the vendor. |
| Vulnerable: |
Macromedia Dreamweaver Ultradev 4.0 Macromedia Dreamweaver MX 6.1 Macromedia Dreamweaver MX 6.0 Macromedia Developer's Resource Kit (DRK) vol. 4 Macromedia Developer's Resource Kit (DRK) vol. 2 Macromedia ColdFusion Server MX 6.0 |
| Not Vulnerable: | |
Discussion
Macromedia Dreamweaver MX/DRK/UltraDev Server Behavior Cross-Site Scripting Vulnerabilities
Macromedia Dreamweaver MX,DRK, and UltraDev are prone to multiple cross-site scripting vulnerabilities. This could permit an attacker to create a malicious link to an affected site that includes hostile HTML and script code. When this link is followed, the attacker-supplied code could be rendered in the web client of the user who follows the link.
Macromedia has released resolution details for a number of server behaviors in affected software.
Macromedia Dreamweaver MX,DRK, and UltraDev are prone to multiple cross-site scripting vulnerabilities. This could permit an attacker to create a malicious link to an affected site that includes hostile HTML and script code. When this link is followed, the attacker-supplied code could be rendered in the web client of the user who follows the link.
Macromedia has released resolution details for a number of server behaviors in affected software.
Exploit / POC
Macromedia Dreamweaver MX/DRK/UltraDev Server Behavior Cross-Site Scripting Vulnerabilities
There is no exploit required.
There is no exploit required.
Solution / Fix
Macromedia Dreamweaver MX/DRK/UltraDev Server Behavior Cross-Site Scripting Vulnerabilities
Solution:
Macromedia has released patches and resolution information for a number of affected products. Please see the Macromedia bulletin (MPSB03-05) for further details about available fixes and resolution information.
Solution:
Macromedia has released patches and resolution information for a number of affected products. Please see the Macromedia bulletin (MPSB03-05) for further details about available fixes and resolution information.
References
Macromedia Dreamweaver MX/DRK/UltraDev Server Behavior Cross-Site Scripting Vulnerabilities
References:
References: