CorePlayer flash video player crossite scripting

Crossite scripting via callback parameter...

Stable Channel Update

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame This build fixes: Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing Issue: 140366. Flash video full screen displays on wrong monitor Issue: 13752...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

CVE-2011-4286: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the media-filter implementation in filter/mediaplugin/filter.php in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 Flash Video aka FLV files and 2 YouTube...

PT-2012-1834

Name of the Vulnerable Software and Affected Versions Moodle versions 1.9.x through 1.9.10 Moodle versions 2.0.x through 2.0.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the media-filter implementation. These vulnerabilities allow remote attackers to injec...

Winamp VP6内容解析栈溢出漏洞

BUGTRAQ ID: 41591 Winamp是一款流行的媒体播放器，支持多种文件格式。 Winamp的vp6.w5s组件在解析畸形的Flash Video数据时存在栈溢出漏洞，用户受骗打开了特制的FLV文件就会导致执行任意代码。 Nullsoft Winamp 5.x 厂商补丁： Nullsoft -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.winamp.com/help/VersionHistoryWinamp5.58...

Flash Video E-Cards Cross Site Scripting

========================= Author : anti-gov contact: anti-govathotmail.com ========================= script:flash video e-cards vendor:http://www.scriptjunkyard.com/2/flash-video-e-cards.html demo: http://www.scriptjunkyard.com/demo/video-greeting/index.php in the video code put this code...

Flash Video E-Cards XSS Vulnerability

No description provided by source. ========================= Author: anti-gov contact: anti-govathotmail.com ========================= script:flash video e-cards vendor:http://www.scriptjunkyard.com/2/flash-video-e-cards.html demo: http://some website/demo/video-greeting/index.php in the video co...

CVE-2008-6062

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...

Cross site scripting

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

CVE-2006-1748

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

CVE-2006-1748

Cross-site scripting XSS vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash .SWF video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript...

CVE-2006-1748

XSS vulnerability CVE-2006-1748 affects XMB Forum 1.9.5 . A Flash (.SWF) video containing a getURL call can render without ActionScript being disabled, enabling remote attackers to inject arbitrary web script/HTML. Documents confirm the root cause is improper handling of Flash content in the vide...