CVE-2013-5326
Last modified
CVE-2013-5326 is a vulnerability of currently unknown severity. Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.. EPSS estimates a 1.84% chance of exploitation in the next 30 days.
Description
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to the logviewer directory.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Adobe | Coldfusion | 9.0 | — |
| Adobe | Coldfusion | 9.0.1 | — |
| Adobe | Coldfusion | 9.0.2 | — |
| Adobe | Coldfusion | <= 10.0 | Update11 |
| Adobe | Coldfusion | 10.0 | — |
References
- http://www.kb.cert.org/vuls/id/295276US Government Resource
- http://www.kb.cert.org/vuls/id/295276US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-5326?
How severe is CVE-2013-5326?
How do I fix CVE-2013-5326?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-5320Cross-site scripting (XSS) vulnerability in Forums/EditPost.…
- CVE-2013-5321Multiple SQL injection vulnerabilities in AlienVault Open So…
- CVE-2013-5322SQL injection vulnerability in the CoolURI extension before …
- CVE-2013-5323Cross-site scripting (XSS) vulnerability in the Static Info …
- CVE-2013-5324Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.…
- CVE-2013-5325Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allo…
- CVE-2013-5327MDBMS.dll in Adobe RoboHelp 10 allows attackers to execute a…
- CVE-2013-5328Adobe ColdFusion 10 before Update 12 allows remote attackers…
- CVE-2013-5329Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x…
- CVE-2013-5330Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x…
- CVE-2013-5331Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x…
- CVE-2013-5332Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x…
Are you affected by CVE-2013-5326?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST