Secunia Reports Cross-Site Scripting Vulnerability in JRun
Secunia Advisories reported that some vulnerabilities have been identified in Macromedia JRun, which can be exploited by malicious people to conduct Cross-Site Scripting attacks.
The vulnerabilities are caused due to missing input validation in "clusterframe.jsp" and "webserverlist.jsp", which are accessible via the JMC interface. This can be exploited to execute arbitrary script code in a user's browser session by tricking the user into visiting a malicious website or clicking a specially crafted link.
To find out more, see the Secunia Advisory below:
Macromedia JRun JMC Interface Cross-Site Scripting Vulnerabilities (Secunia Advisories, November 28, 2003)
Latest ColdFusion Talk (CF-Talk)
- ColdFusion not seeing standard Java classes when using CFINVOKE
- Pre-filling FileField Values
- cfthread running condition?
- cfhttp and Google Search Appliance
- xmlTransform() and an unnecessary xml declaration
- AMD vs Intel for ColdFusion Servers
- Listing then Deleting Duplicates
- CF8 PDF Fonts
- putting " " in cffile
- Text to image for Non CSS font resolution
Latest ColdFusion Jobs (CF-Jobs)
- Sr ColdFusion Developer Available
- Cold Fusion Flex Developer - PA
- North Bay Application Developer Search
- Contract to HIRE Cold Fusion Developer needed in Wake Forest NC
- Please post this Cold Fusion opportunity Thanks
- ColdFusion Developer - Northern California
- ColdFusion MX 7 Server Consultant in/around Hoboken, NJ
- ColdFusion Web Developer - Baltimore, MD
- ColdFusion Web Developer
- Part Time Coding Job
Want a number like 800-ColdFusion?
My Toll Free 800 Number provides a vanity phone number service to clients who want more than just digits. How would you like 800-coldfusion?