workday.com XSS vulnerability

Vulnerable URL: http://www.workday.com/fr/resources.php?Resource="-prompt/XSSPOSED/-" Details: Description| Value ---|--- Patched:| Yes, at 23.10.2015 Latest check for patch:| 23.10.2015 15:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19617 Google Pagerank...

WORKDAY Cloud Service Detection

Binary data 8533.prm...

multimedia macro allows execution of arbitrary scripts

The multimedia macro in confluence embeds a swf without the 'allowScriptAccess' attribute set to 'none'. This allows the embedded user submitted swf to execute arbitrary javascript on the page, constituting an XSS vulnerability. The multimedia tag is bundled in with the base product and not an...

multimedia macro allows execution of arbitrary scripts

The multimedia macro in confluence embeds a swf without the 'allowScriptAccess' attribute set to 'none'. This allows the embedded user submitted swf to execute arbitrary javascript on the page, constituting an XSS vulnerability. The multimedia tag is bundled in with the base product and not an...