CVE-2017-12439

creationtimestamp| type| source ---|---|--- 2023-12-18 03:50:40+00:00| seen| https://t.me/arpsyndicate/1905...

CVE-2017-12439

The CVE-2017-12439 entry concerns SocuSoft Flash Slideshow Maker Professional up to version 5.20. When advanced configuration is used, the xml_path HTTP parameter trusts user-supplied input in conjunction with an unsafe XML configuration file, enabling issues described as content forgery, cross-s...