EUVD-2014-9487

Malware in sbrugna...

Flexpaper Cross-Site Scripting Vulnerability

FlexPaper is an open source lightweight used to display a variety of documents in the browser component , it needs to be used with PDF2SWF. A cross-site scripting vulnerability exists in the FlexPaperViewer.swf file in versions of Flexpaper prior to 2.3.1. A remote attacker can exploit this...

FlexPaper Content Forgery Vulnerability

FlexPaper is an open source lightweight used to display a variety of documents in the browser component , it needs to be used with PDF2SWF. A security vulnerability exists in the FlexPaperViewer.swf file in versions of Flexpaper prior to 2.3.1. A remote attacker can exploit this vulnerability to...

CVE-2014-9677

Cross-site scripting XSS vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter...

Spoofing

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter...

CVE-2014-9677

CVE-2014-9677 is an XSS in FlexPaperViewer.swf (Flexpaper) prior to 2.3.1. The vulnerability arises in the FlexPaperViewer.swf component via the Swfile parameter, allowing remote attackers to inject arbitrary web script/HTML. Connected CNVD entry confirms FlexPaper before 2.3.1 as affected; CNVD-...

CVE-2014-9678: Improper Input Validation

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter...

CVE-2014-9677: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter...

PT-2017-6379

Name of the Vulnerable Software and Affected Versions Flexpaper versions prior to 2.3.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter. This can lead to the execution of malicious code on the client-side...

PT-2017-6380

Name of the Vulnerable Software and Affected Versions Flexpaper versions prior to 2.3.1 Description The issue allows remote attackers to conduct content-spoofing attacks. This is achieved via the Swfile parameter. Recommendations For versions prior to 2.3.1, update to version 2.3.1 or later to...