CVE:CVE-2006-5860
CNNVD:CNNVD-200702-257
Adobe JRun 4.0版本的管理员控制台中存在跨站脚本攻击漏洞,当在ColdFusion中运行时,远程攻击者可以借助未明向量，注入任意web脚本或HTML。
solution:Upgrade adobe coldfusion to a higher version than 6.1,7.0,and avoid the version 6.1,7.0; Upgrade adobe jrun to a higher version than 4.0,4.0:sp1,4.0:sp1a,4.0_build_61650,and avoid the version 4.0,4.0:sp1,4.0:sp1a,4.0_build_61650