EUVD-2012-1913

Malware in sbrugna...

CVE-2012-1903

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter...

SUSE CVE-2008-3872

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations...

Design/Logic Flaw

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter...

CVE-2012-1903

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter...

CVE-2012-1903: Improper Neutralization of Input During Web Page Generation

XSS in Telligent Community 5.6.583.20496 via a flash file and related to the allowScriptAccess parameter...

PT-2020-7193

Name of the Vulnerable Software and Affected Versions Telligent Community version 5.6.583.20496 Description The issue is related to a flash file and the allowScriptAccess parameter, which can lead to XSS. Recommendations For Telligent Community version 5.6.583.20496, consider restricting access t...

ThinkSAAS存储型跨站

简要描述： ThinkSAAS存在存储型跨站，可攻击任意用户或盲打管理员，盗取用户cookie等等 详细说明： ThinkSAAS对文章内容过滤不严，导致存在存储型的Flash跨站。由于Flash文件可以执行任意脚本，利用此漏洞我们可以盗取任意用户包括管理员的cookie信息，或进行其它恶意攻击。 漏洞证明： 1、涉及版本：thinksaas2.2-beta 2、登录系统，在文章模块发布文章，在内容处选择插入视频并输入flash文件路径。 3、拦截请求，将标签的allowscriptaccess属性值改为always 4、其它用户登录系统，查看文章时，漏洞触发：...

KesionCMS存储型跨站(可打管理员)

简要描述： KesionCMS存在存储型跨站，触发概率很大，可打管理员。 详细说明： KesionCMS X1.0.141014存在存储型跨站，利用此漏洞，我们可以攻击任意用户和管理员，获取任意用户和管理员cookie信息，或进行其它恶意攻击。 漏洞证明： 1、登录系统--》会员中心--》文章--》发布，在文章内容处插入flash文件。 2、发布文章时，拦截请求，将allowscriptaccess的属性值改为always 3、其它用户浏览发布的文章时，漏洞触发： 4、使用Firebug查看页面源代码，允许执行swf文件内的as代码：...

Flash Player (Flash6.ocx) AllowScriptAccess DoS PoC

No description provided by source. !-- Title : Flash Player Flash6.ocx AllowScriptAccess DoS PoC Found By : DrIDE Tested on : Windows XPSP3 VM + IE7 COM Object ID : D27CDB6E-AE6D-11cf-96B8-444553540000 Shockwave Flash Object COM Object Filename : C:\WINDOWS\system32\Macromed\Flash\Flash6.ocx File...

Flash Player - 'Flash6.ocx' AllowScriptAccess Denial of Service (PoC)

PARAM NAME="AllowScriptAccess"...

Discuz!/phpwind flash标签的xss

flash标签的xss在以前的是很流行的,以前只要随便一个调用外面的一个swf就ok了,现在的则都不可以直接使用调用外码的swf了,这个是因为一般都设置了allowScriptAccess12.比如dz的codz: dz60904\upload\forumdata\cache\cachebbcodes.php 同样出现在cacheviewthread.php cachepost.php cacheblog.php里 00017: 0 = 'marquee width="90%" behavior="alternate" scrollamount="3"\1/marquee', 00018...

CVE-2008-3872: Undefined Security Weakness

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations...

CVE-2006-6827

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the Flash8b.AllowScriptAccess method...

Adobe Flash Player allowScriptAccess protection bypass vulnerability

Overview A vulnerability in Adobe Flash Player may allow a remote attacker to bypass allowScriptAccess protection. Description Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser. According to Adobe: The...

CVE-2006-4640

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors...

CVE-2006-4640

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors...

CVE-2006-4640

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors...

security flaw

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors...

CVE-2006-4640: Undefined Security Weakness

Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors...