Cross-site scripting in yui 2.4.0

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...

PT-2012-6162

Name of the Vulnerable Software and Affected Versions YUI versions 2.4.0 through 2.9.0 Description A cross-site scripting XSS issue exists in the Flash component infrastructure, allowing remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf. This is similar to ...

PT-2012-6164

Name of the Vulnerable Software and Affected Versions YUI versions 2.8.0 through 2.9.0 Bugzilla versions 3.7.x and earlier Bugzilla versions 4.0.x through 4.0.8 Bugzilla versions 4.1.x through 4.2.3 Bugzilla versions 4.3.x through 4.4rc1 Description A cross-site scripting XSS issue exists in the...

PT-2012-6163

Name of the Vulnerable Software and Affected Versions YUI versions 2.5.0 through 2.9.0 Description A cross-site scripting XSS issue exists in the Flash component infrastructure, allowing remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf. This is similar t...

CVE-2012-5882: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208...

CVE-2012-5883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors...

CVE-2012-5881: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...

CVE-2010-4208

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...

CVE-2010-4207

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...

PT-2010-5356

Name of the Vulnerable Software and Affected Versions YUI versions 2.5.0 through 2.8.1 Description A cross-site scripting XSS issue exists in the Flash component infrastructure of YUI, which can be exploited by remote attackers to inject arbitrary web script or HTML. This is achieved through...

PT-2010-5355

Name of the Vulnerable Software and Affected Versions YUI versions 2.4.0 through 2.8.1 Description A cross-site scripting issue exists due to a vulnerability in the Flash component infrastructure. This allows remote attackers to inject arbitrary web script or HTML. The issue is related to vectors...

PT-2010-5357

Name of the Vulnerable Software and Affected Versions YUI versions 2.8.0 through 2.8.1 Bugzilla versions 3.7.1 through 3.7.3 Bugzilla version 4.1 Description A cross-site scripting XSS issue exists in the Flash component infrastructure in YUI, as used in Bugzilla, allowing remote attackers to...

CVE-2010-4207: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...

CVE-2010-4208: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...