CVE-2005-4075: Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote at...

Security readout for executives and security teams

CVE-2005-4075 is an old cross-site scripting issue in CF_Nuke. If a public site still runs CF_Nuke 4.6 or earlier, attackers may be able to make pages run attacker-supplied script or HTML in visitors' browsers. Exposure is likely limited to legacy public CF_Nuke deployments, especially internet-facing ColdFusion sites still running version 4.6 or earlier. Organizations not using CF_Nuke are not affected based on the supplied sources. Treat this as a legacy exposure cleanup item unless CF_Nuke is internet-facing. Public affected systems should be prioritized because XSS can support account abuse, phishing, and session theft against site users. Mitigation focus: Identify any CF_Nuke deployments and confirm whether versions are 4.6 or earlier.; Check CF_Nuke or archived vendor guidance for fixed releases or official patches.; If no supported fix exists, retire, replace, or isolate the legacy application..

Prepared

Jun 29, 2026, 16:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.