3

I have the following code in an SWF file that a vulnerability scanner marks as XSS:

// Action0
    {
        var __callResult_6 = getURL(_root.thankYou, "_self");
        var __callResult_7 = stop();

    }

How can it be exploited and how can it be patched if exploitable?

0

1 Answer 1

2

You'll find a detailed description of the issue HERE

2
  • 6
    Please provide some actual content that addresses the question in your answer - not just a link.
    – Iszi
    Dec 15, 2011 at 14:51
  • 2
    I want to speak up in defense of SinistraD. His link is exactly spot-on. It completely answers the question. I wish people would stop giving SinistraD a hard time. I don't see any reason why it helps anyone in the world to try to write the explanation found at that link here, all over again. Heaven forbid I should have to lift my index finger and click on a link. (And if the link disappears, just use archive.org. It's not rocket science.)
    – D.W.
    Dec 19, 2011 at 5:06

You must log in to answer this question.