Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit...

Adobe Flex SDK 3.x - 'index.template.html' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit this vulnerability to execute arbitrary script code in the...

Mandriva Linux Security Advisory : ipsec-tools (MDVSA-2009:112-1)

racoon/isakmpfrag.c in ipsec-tools before 0.7.2 allows remote attackers to cause a denial of service crash via crafted fragmented packets without a payload, which triggers a NULL pointer dereference CVE-2009-1574. Updated packages are available that brings ipsec-tools to version 0.7.2 for Mandriv...

Adobe Flash Player Multiple Vulnerabilities - Mar09 (Windows)

This host is installed with Adobe Products and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnmar09win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Mar09 Windows Authors: Sharath S Copyright: Copyright c...

Simple Directory Listing 2 Cross Site File Upload Vulnerability

No description provided by source. Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- mx:Application xmlns:mx="http://www.adobe.com/2006/mxml" creationComplete="onAppInit" mx:Script / Written by Michael Brooks...

Simple Directory Listing Upload Vulnerability

Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- / Written by Michael Brooks VUlerablity type: Cross Site File Upload. Affects: SDL 2.1 beta1 Product homepage: http://simpledirectorylisting.net/ SDL has 22+ millio...

Simple Directory Listing 2 - Cross-Site Arbitrary File Upload

Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- / Written by Michael Brooks VUlerablity type: Cross Site File Upload. Affects: SDL 2.1 beta1 Product homepage: http://simpledirectorylisting.net/ SDL has 22+ millio...

Simple Directory Listing 2 Cross Site File Upload Vulnerability

Exploit for unknown platform in category web applications =============================================================== Simple Directory Listing 2 Cross Site File Upload Vulnerability =============================================================== Simple Directory Listing 2 - Cross Site File...

Simple Directory Listing 2 - Cross-Site Arbitrary File Upload

Simple Directory Listing 2 - Cross-Site Arbitrary File Upload Simple Directory Listing 2 - Cross Site File Upload -------------------------------------------------------------------------------- / Written by Michael Brooks VUlerablity type: Cross Site File Upload. Affects: SDL 2.1 beta1 Product...

Adobe Flash Player/Flash CS/AIR/Flex Detection (Windows SMB Login)

SMB login-based detection of Adobe Flash Player/Flash CS/AIR/Flex. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-07 (flex)

The remote host is missing updates announced in advisory GLSA 200603-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200603-07 (flex)

The remote host is missing updates announced in advisory GLSA 200603-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Adobe Flex 3历史管理'historyFrame.html'跨站脚本漏洞

BUGTRAQ ID: 29778 CVE ID：CVE-2008-2640 CNCVE ID：CNCVE-20082640 Adobe Flex 3是一款开发富网络应用的工具。 Adobe Flex 3历史管理功能存在跨站脚本问题，远程攻击者可以利用漏洞获得敏感信息。 Adobe Flex 3历史管理功能存在输入验证错误，historyFrame.html脚本对用户提交的参数缺少过滤，提交恶意脚本代码，并诱使用户访问，可导致获得目标用户敏感信息。 Adobe Flex SDK 3.0.1 Adobe Flex Builder 3 Adobe Flex 3.0 升级程序： Adobe...

Adobe Flex 3历史管理historyFrame.html跨站脚本漏洞

BUGTRAQ ID: 29778 CVECAN ID: CVE-2008-2640 Adobe Flex 3是用于构建和维护Web应用程序的高效开放源码框架。 Flex 3的历史管理功能所使用的historyFrame.html页面没有正确地过滤某些用户输入便返回给了用户，这允许远程攻击者通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 0 Adobe Flex Builder 3 Adobe Flex 3.0.1 SDK Adobe ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to 1...

CVE-2008-2640

Multiple cross-site scripting XSS vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to 1...

CVE-2008-2640

Multiple cross-site scripting XSS vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to 1...

CVE-2008-2640

CVE-2008-2640 concerns cross-site scripting in Adobe Flex 3 History Management. The vulnerability lies in historyFrame.html (used by Flex 3.0.1 SDK and Flex Builder 3 and generated applications) where user-supplied values are not properly filtered in the anchor identifier, enabling remote attacke...

Adobe Flex 3 History Management historyFrame.html XSS

The remote host contains one or more HTML documents associated with Adobe Flex 3's History Management Feature and affected by a DOM-based cross-site scripting vulnerability. Due to its failure to sanitize user input, an attacker may be able to leverage this issue to inject arbitrary HTML and scri...

CVE-2008-1656

Adobe ColdFusion 8 and 8.0.1 are affected by CVE-2008-1656, where the public access level for CFC methods is not properly enforced, enabling remote invocation of restricted functions via Flex 2 remoting. The root cause is inadequate access control for CFC methods; impact is remote access to funct...