Cross-site scripting (XSS) vulnerability in BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to inject arbitrary web script or HTML via the filename in a request to a (1) .cfm or (2) .cfml file, which reflects the result in the default error page.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bluedragon_server | New_atlanta_communications | 6.2.1.286 (including) | 6.2.1.286 (including) |
| Bluedragon_server_jx | New_atlanta_communications | 6.2.1.286 (including) | 6.2.1.286 (including) |