FlashCard 'cPlayer.php' Cross-Site Scripting Vulnerability

FlashCard is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-1872

CVE-2010-1872 is a documented XSS vulnerability in FlashCard’s cPlayer.php affecting versions 2.6.5 and 3.0.1. The flaw allows remote attackers to inject arbitrary script/HTML via the id parameter. The core impact is cross-site scripting with partial integrity impact as per the CVSSv2 base score ...