Simple Directory Listing 2 - Cross-Site Arbitrary File Upload

Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- / Written by Michael Brooks VUlerablity type: Cross Site File Upload. Affects: SDL 2.1 beta1 Product homepage: http://simpledirectorylisting.net/ SDL has 22+ millio...

Adobe Flex 3历史管理'historyFrame.html'跨站脚本漏洞

BUGTRAQ ID: 29778 CVE ID：CVE-2008-2640 CNCVE ID：CNCVE-20082640 Adobe Flex 3是一款开发富网络应用的工具。 Adobe Flex 3历史管理功能存在跨站脚本问题，远程攻击者可以利用漏洞获得敏感信息。 Adobe Flex 3历史管理功能存在输入验证错误，historyFrame.html脚本对用户提交的参数缺少过滤，提交恶意脚本代码，并诱使用户访问，可导致获得目标用户敏感信息。 Adobe Flex SDK 3.0.1 Adobe Flex Builder 3 Adobe Flex 3.0 升级程序： Adobe...

Adobe Flex 3历史管理historyFrame.html跨站脚本漏洞

BUGTRAQ ID: 29778 CVECAN ID: CVE-2008-2640 Adobe Flex 3是用于构建和维护Web应用程序的高效开放源码框架。 Flex 3的历史管理功能所使用的historyFrame.html页面没有正确地过滤某些用户输入便返回给了用户，这允许远程攻击者通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 0 Adobe Flex Builder 3 Adobe Flex 3.0.1 SDK Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to 1...

CVE-2008-2640

Multiple cross-site scripting XSS vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to 1...

CVE-2008-2640

Multiple cross-site scripting XSS vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to 1...

CVE-2008-2640

CVE-2008-2640 concerns cross-site scripting in Adobe Flex 3 History Management. The vulnerability lies in historyFrame.html (used by Flex 3.0.1 SDK and Flex Builder 3 and generated applications) where user-supplied values are not properly filtered in the anchor identifier, enabling remote attacke...

Adobe Flex 3 History Management historyFrame.html XSS

The remote host contains one or more HTML documents associated with Adobe Flex 3's History Management Feature and affected by a DOM-based cross-site scripting vulnerability. Due to its failure to sanitize user input, an attacker may be able to leverage this issue to inject arbitrary HTML and scri...

Adobe Flash Player Multimedia File Remote Buffer Overflow Vulnerability

Description Adobe Flash Player is prone to a remote buffer-overflow vulnerability when handling multimedia files with certain tags. An attacker may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in...