10 matches found
EUVD-2022-4384
Malicious code in bioql PyPI...
SUSE CVE-2010-4207
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...
Cross-site scripting in yui 2.4.0
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...
QIWI: [rubm.qiwi.com] Yui charts.swf XSS
Yui charts.swf XSS...
openSUSE Security Update : typo3-cms-4_5 (openSUSE-SU-2014:0813-1)
typo3-cms-45 was updated to version 4.5.34 to fix eight security vulnerabilities and several other bugs. These security problems where fixed : - Add trusted HTTPHOST configuration CVE-2014-3941 - XSS in old extension manager information function CVE-2014-3943 - XSS in new content element wizard...
Cloudflare: http://cdnjs.cloudflare.com/ Cross-site scripting 2
Hi, I found another flash based XSS located here : http://cdnjs.cloudflare.com/ajax/libs/extjs/3.4.1-1/resources/charts.swf?allowedDomain=%22catchealertdocument.domain;// best regards, Olivier Beg!...
CVE-2012-5881
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...
CVE-2012-5881
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...
CVE-2012-5881
CVE-2012-5881 concerns a cross-site scripting (XSS) vulnerability in the YUI library’s Flash component infrastructure (charts.swf) affecting YUI versions 2.4.0–2.9.0. An attacker could inject arbitrary script/HTML via vectors related to charts.swf, allowing execution of code in a victim’s browser...
Cross site scripting
Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...