9 matches found
magento-swf-patched-CVE-2011-2461
magento-swf-patched-CVE-2011-2461 CVE-2011-2461を修正するためのuploader.swfおよびuploaderSingle.swfのパッチ版 脆弱性のある.swfファイル(Magentoのコア内)の詳細はこちら - https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html CVE-2011-2461の主な理由は、@Mindedsecurityによって最もよく説明されています...
ParrotNG
ParrotNG ParrotNGは、CVE-2011-2461 に対して脆弱なAdobe Flexアプリケーション(SWF)を特定できるツールです。詳細については、Troopers 2015の発表スライド を参照してください。 最新リリースはこちらからダウンロードしてください。 機能 Javaで記述、swfdump ベース 1つのJAR、2つのフレーバー:コマンドラインユーティリティとBurp Pro パッシブスキャナプラグイン 脆弱なFlex SDKバージョンでコンパイルされたSWFファイル、Adobeのツール でパッチ適用済み、または影響を受けていないものの検出 使用方法 -...
K62050299: Adobe Flex vulnerability CVE-2011-2461
Security Advisory Description Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains. CVE-2011-2461 Impact There is no impact; F5 produc...
Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vulnerability
Dell SonicWALL GMS versions 8.1 and below are compiled with a vulnerable version of Adobe Flex SDK allowing for same-origin request forgery and cross-site content hijacking i? Dell SonicWALL Global Management System GMS 8.1 Adobe Flex SOP Bypass Vendor: Dell Inc. Product web page:...
Adobe cve-2 0 1 1-2 4 6 1 vulnerability can still be exploited-vulnerability warning-the black bar safety net
A There have been four years of Adobe Flash patch did not correctly resolve the Flex application vulnerable issue, and the attacker still can exploit this vulnerability. Reportedly, this vulnerability affects the world Alexa rank of the top ten most popular sites in the 3 0 percent. Linkedln...
Adobe CVE-2011-2461 Remains Exploitable Via Flex Four Years After Patch
UPDATE: This article has been updated to add commentary and clarification from Adobe. A four year old Adobe Flash patch did not properly resolve a vulnerable Flex application, and attackers can exploit the bug, which is said to affect some 30 percent of Alexa’s top 10 most popular sites in the...
Adobe Flex SDK Flex-Generated SWF File Cross-Site Scripting (APSB11-25; CVE-2011-2461)
A Cross-site scripting vulnerability has been reported in Adobe Flex SDK. The vulnerability is due to an error in the way Flex-generated SWF files accept arguments. A remote attacker could exploit this vulnerability by enticing a user to open a web page containing an embedded malformed SWF file...
Adobe Flex SDK 跨站脚本执行漏洞(CVE-2011-2461)
No description provided by source...
CVE-2011-2461
Cross-site scripting XSS vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains...