CVE-2011-0629

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Cross-site request forgery (CSRF) vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Metrics

CVSS 2.0 6.8/10AV:N/AC:M/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-352

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.adobe.com/support/security/bulletins/apsb11-14.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/68027
http://www.adobe.com/support/security/bulletins/apsb11-14.htmlPatch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/68027

Timeline

Published: Jun 16, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-06334.3The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in envir CVE-2011-06356.0Static code injection vulnerability in Simploo CMS 1.7.1 and earlier allows remote authenticated users to inject arbitrary PHP code into con CVE-2011-06362.1The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly ot CVE-2011-06374.9The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which might allow attacker CVE-2011-06386.9Microsoft Windows does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allo CVE-2011-06396.9Apple Mac OS X does not properly warn the user before enabling additional Human Interface Device (HID) functionality over USB, which allows CVE-2011-06406.9The default configuration of udev on Linux does not warn the user before enabling additional Human Interface Device (HID) functionality over CVE-2011-06414.3Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attacke CVE-2011-06424.3Cross-site request forgery (CSRF) vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authe CVE-2011-06436.8Cross-site request forgery (CSRF) vulnerability in admin/conf_users_edit.php in PHP Link Directory (phpLD) 4.1.0 allows remote attackers to CVE-2011-06447.5SQL injection vulnerability in include/admin/model_field.class.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL comman CVE-2011-06457.5SQL injection vulnerability in data.php in PHPCMS 2008 V2 allows remote attackers to execute arbitrary SQL commands via the where_time param