Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by “Remote Cookie Disclosure.” NOTE: it could be argued that this is an issue in Shockwave instead of Nuked Klan.
CPE | Name | Operator | Version |
---|---|---|---|
nuked-klan | eq | 1.2 | |
nuked-klan | eq | 1.4 | |
nuked-klan | eq | 1.2.0-beta | |
nuked-klan | eq | 1.3 | |
nuked-klan | eq | 1.5 | |
nuked-klan | eq | 1.7 | |
nuked-klan | eq | 1.5.0-sp2 | |
nuked-klan | eq | 1.3.0-beta |