EUVD-2014-9487

Malware in sbrugna...

FlexPaper Content Forgery Vulnerability

FlexPaper is an open source lightweight used to display a variety of documents in the browser component , it needs to be used with PDF2SWF. A security vulnerability exists in the FlexPaperViewer.swf file in versions of Flexpaper prior to 2.3.1. A remote attacker can exploit this vulnerability to...

Flexpaper Cross-Site Scripting Vulnerability

FlexPaper is an open source lightweight used to display a variety of documents in the browser component , it needs to be used with PDF2SWF. A cross-site scripting vulnerability exists in the FlexPaperViewer.swf file in versions of Flexpaper prior to 2.3.1. A remote attacker can exploit this...

Spoofing

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter...

CVE-2014-9677

Cross-site scripting XSS vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter...

CVE-2014-9677

CVE-2014-9677 is an XSS in FlexPaperViewer.swf (Flexpaper) prior to 2.3.1. The vulnerability arises in the FlexPaperViewer.swf component via the Swfile parameter, allowing remote attackers to inject arbitrary web script/HTML. Connected CNVD entry confirms FlexPaper before 2.3.1 as affected; CNVD-...

CVE-2014-9678: Improper Input Validation

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter...

CVE-2014-9677: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter...

PT-2017-6379

Name of the Vulnerable Software and Affected Versions Flexpaper versions prior to 2.3.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter. This can lead to the execution of malicious code on the client-side...

PT-2017-6380

Name of the Vulnerable Software and Affected Versions Flexpaper versions prior to 2.3.1 Description The issue allows remote attackers to conduct content-spoofing attacks. This is achieved via the Swfile parameter. Recommendations For versions prior to 2.3.1, update to version 2.3.1 or later to...