Secunia

A vulnerability has been reported in ColdFusion, which can be exploited by malicious people to conduct cross-site scripting attacks.

Input passed via the URL isn't properly sanitised before being returned to the user via a ColdFusion error page. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

The vulnerability has been reported in versions 6.1, 7.01, and 7.02.

Solution
Apply hotfix for versions 6.1, 7.0.1, and 7.0.2.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Mike Nicholls, Cabbage Tree Creative Ltd.

Original Advisory
Adobe Systems:
http://www.adobe.com/support/security/bulletins/apsb06-14.html

Deep Links
Links available in Customer Area