CVE-2009-1879

The CVE-2009-1879 item covers a DOM-based XSS in Adobe Flex SDK’s express-install template index.template.html, affecting Flex SDK prior to 3.4 when the installed Flash version is older than a specified requiredMajorVersion. A remote attacker can inject arbitrary script via the query string. Open...

CVE-2009-1879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified requiredMajorVersion value, allows remote attackers to inject arbitrary web script or HTML via the query...

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting

Adobe Flex SDK 3.x - index.template.html Cross-Site Scripting source: https://www.securityfocus.com/bid/36087/info Adobe Flex SDK is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input to express-install template files. An attacker could exploit...