CVE-2014-9677: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter...

CVE-2014-9678: Improper Input Validation

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter...

FlexPaper 'FlexPaperViewer.swf' Cross-Site Scripting Vulnerability

FlexPaper is an open source lightweight in the browser to display a variety of documents on the component . A cross-site scripting vulnerability exists in FlexPaper 'FlexPaperViewer.swf' due to the program failing to properly filter user-supplied input. An attacker can exploit this vulnerability ...