CVE-2012-1302

CVE-2012-1302 describes multiple cross-site scripting vulnerabilities in amMap 2.6.3. The flaws affect the Flash components ammap.swf (parameters: data_file, settings_file) and amtimeline.swf (parameter: data_file), allowing remote attackers to inject arbitrary script/HTML. The provided sources d...