71 matches found
Hana Flv Player <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin was vulnerable to an Authenticated Stored Cross-Site Scripting XSS vulnerability within the "Default Skin" field. PoC Step1: Install and activate the plugin. Step2: Go to the plugin setting. Step3: Enter the following payload in the field "Default Skin" xss"...
WordPress Hana Flv Player plugin <= 3.1.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Kishore Hariram in WordPress Hana Flv Player plugin versions = 3.1.3. Solution No patched version is available. The last version was released 8 years ago...
Flv Player 2011 1.3 DLL Hijacking
Document Title: =============== Flv Player 2011 v1.3 - DLL Hijacking Vulnerability Release Date: ============= 2016-09-23 Vulnerability Disclosure Timeline: ================================== 2016-09-30 : Public Disclosure Product & Service Introduction: =============================== FLV Player...
Flv Player 2011 v1.3 - DLL Hijacking Exploit
Document Title: =============== Flv Player 2011 v1.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1962 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ==================================== 1962 Common...
Flv Player 2011 v1.3 - DLL Hijacking Exploit
Document Title: =============== Flv Player 2011 v1.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1962 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1962 Common...
FLV Player - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application FLV Player published at the 'play' market has multiple vulnerabilities...
Joomla HD FLV Player < 2.1.0.1 - Arbitrary File Download Vulnerability
No description provided by source...
Joomla HD FLV Player < 2.1.0.1 - SQL Injection Vulnerability
No description provided by source...
WordPress Contus HD FLV Player Plugin <= 1.7 - Arbitrary File Upload
This plugin is prone to an arbitrary file upload vulnerability. Solution Update plugin...
WordPress Hitasoft FLV Player Plugin - SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Upgrade the plugin...
WordPress Hitasoft FLV Player Plugin - SQL Injection
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Upgrade the plugin...
Custom Websites Running HD FLV Player Plugin Vulnerable
Content management system providers Joomla and WordPress have patched a critical vulnerability in the HD FLV Player, but custom websites running the Flash video player are still vulnerable. Researchers at Sucuri disclosed this week that a separate security issue can be abused to send spam and has...
Joomla HD FLV Player 2.1.0.1 - Arbitrary File Download Vulnerability
Joomla HD FLV version 2.1.0.1 suffers from an arbitrary file download vulnerability !/usr/bin/env python Exploit Title : Joomla HD FLV 2.1.0.1 and below Arbitrary File Download Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link :...
WordPress Contus HD FLV Player plugin <= 1.3 - SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress Contus HD FLV Player plugin = 1.3 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/contus-hd-flv-player.1.3.zip Version: 1.3...
HD FLV Player Component for Joomla! 'id' Parameter SQL Injection Vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '86873' ssvid version = '1.0' author = 'kikay' vulDate = '2010-04-13' createDate ...
FLV Players 8 popup.php url Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/18954/info FLV Player is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...
Wordpress plugin Ripe HD FLV Player SQL Injection Vulnerability
No description provided by source. ------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.php Author = Zikou-...
flv-player 3.5 Cross Site Scripting / Content Spoofing
Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in flv-player. ------------------------- Affected products: ------------------------- Vulnerable are flv-player 3.5 and previous versions. ------------------------- Affected vendors: ------------------------- U-Studio...
Dotclear 2.4.4 Cross Site Scripting / Content Spoofing
Hello list! These are Cross-Site Scripting and Content Spoofing vulnerabilities in Dotclear. CMS Dotclear has three vulnerable flash-files: swfupload.swf, playerflv.swf and playermp3.swf. File swfupload.swf it's Swfupload. I've wrote about vulnerabilities in Swfupload in November 2012...
WordPress Ripe HD FLV Player SQL Injection / Path Disclosure
------------------------------------------------------------------- Wordpress plugins - ripe-hd-player FD/SQL Injection Vulnerability ------------------------------------------------------------------- Vendor: http://www.hitasoft.com/products.php Author = Zikou-16 E-mail = [email protected]...