CVE-2010-4208

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...

CVE-2010-4208

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...

CVE-2010-4207

The CVE-2010-4207 entry concerns a Cross-site Scripting (XSS) flaw in the YUI Flash-based Chart infrastructure. Affected are YUI library versions 2.4.0 through 2.8.1 (and related charts.swf usage in Bugzilla, Moodle, etc.). Root cause stated in sources is improper validation in the Flash componen...

CVE-2010-4208

CVE-2010-4208 is an XSS vulnerability in the Flash component infrastructure of YUI, specifically in the uploader.swf used by YUI 2.5.0 through 2.8.1 (and related references indicate continued concern up to 2.9.0). The root cause is improper validation in the Flash uploader assets, allowing remote...

CVE-2010-4209

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

CVE-2010-4209

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

CVE-2010-4207

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...

CVE-2010-4209

CVE-2010-4209 is an XSS in the YUI Flash component (swfstore/swfstore.swf) used by Bugzilla 3.7.1–3.7.3 and 4.1 with YUI 2.8.0–2.8.1. The vulnerability allows remote attackers to inject arbitrary scripts/HTML via the swfstore vector. Connected Nessus/OpenVAS/Moodle-related entries corroborate the...

CVE-2010-4207: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf...

CVE-2010-4208: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf...

PT-2010-5357

Name of the Vulnerable Software and Affected Versions YUI versions 2.8.0 through 2.8.1 Bugzilla versions 3.7.1 through 3.7.3 Bugzilla version 4.1 Description A cross-site scripting XSS issue exists in the Flash component infrastructure in YUI, as used in Bugzilla, allowing remote attackers to...

PT-2010-5355

Name of the Vulnerable Software and Affected Versions YUI versions 2.4.0 through 2.8.1 Description A cross-site scripting issue exists due to a vulnerability in the Flash component infrastructure. This allows remote attackers to inject arbitrary web script or HTML. The issue is related to vectors...

PT-2010-5356

Name of the Vulnerable Software and Affected Versions YUI versions 2.5.0 through 2.8.1 Description A cross-site scripting XSS issue exists in the Flash component infrastructure of YUI, which can be exploited by remote attackers to inject arbitrary web script or HTML. This is achieved through...

CVE-2010-4209: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf...

Bugzilla < 3.2.9 / 3.4.9 / 3.6.3 Multiple Vulnerabilities

Binary data 5700.prm...

YUI charts.swf / swfstore.swf / uploader.swf XSS

The version of the YUI library of JavaScript utilities and controls hosted on the remote web server includes at least one SWF file that is affected by an unspecified cross-site scripting vulnerability. An attacker can leverage this issue to inject arbitrary HTML or script code into a user's brows...

YUI JavaScript library -- JavaScript injection exploits in Flash components

The YUI team reports: A security-related defect was introduced in the YUI 2 Flash component infrastructure beginning with the YUI 2.4.0 release. This defect allows JavaScript injection exploits to be created against domains that host affected YUI .swf files...

YUI Images Script Shell Upload

Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link: http://momche.net/res/YUI-upload/html/momche-yui-upload.zip Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit : http://127.0.0.1/YUI-upload/html Upload shell .php.giff Go To...

YUI Images Script - Arbitrary File Upload

Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link: http://momche.net/res/YUI-upload/html/momche-yui-upload.zip Tested on Lunix CVE : N/A Founded By Mr.P3rfekT Helllo Allz Exploit : http://127.0.0.1/YUI-upload/html Upload shell .php.giff Go To...

YUI Images Script Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================ YUI Images Script Shell Upload Vulnerability ============================================ Title: YUI Images Script Shell Upload Vulnerability Version: 1.0 Author: Mr.P3rfekT Software Link:...