← voltar
CVE-2006-1748

CVE-2006-1748

EPSS 1.8%
Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash (.SWF) video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://docs.xmbforum2.com/index.php?title=Security_Issue_Historyhttps://exchange.xforce.ibmcloud.com/vulnerabilities/25737http://www.securityfocus.com/archive/1/430432/100/0/threadedhttp://www.securityfocus.com/bid/17445