Tagged Questions
1
vote
1answer
124 views
Need an explanation of Cross-Site Flashing?
I found this : http://demo.testfire.net/vulnerable.swf
Can anyone provide me examples of how these issues are exploited.
Thanks
2
votes
2answers
116 views
For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
Flash has a long history of ignoring MIME types of files and reading the file directly for executable content or for cross domain execution permissions. That means a malicious user can take advantage ...
3
votes
1answer
713 views
XSS in SWF file
I have the following code in an SWF file that a vulnerability scanner marks as XSS:
// Action0
{
var __callResult_6 = getURL(_root.thankYou, "_self");
var __callResult_7 = stop();
...
