All Questions
3 questions
2
votes
1
answer
615
views
How can javascript files represent a flash-based XSS vulnerability?
I am hosting a static website (no PHP etc., just HTML/JavaScript/CSS) with a security-conscious hoster that proactively removes vulnerable files. This is fine with me.
However, their last report ...
- 4,143
3
votes
1
answer
393
views
Is it possible to get a flash src after a redirect or an element inside an embed/object/iframe tag (cross-domain)?
The URL example.com/auth will automatically redirect the user (HTTP 302) to example.com/signed_in.SWF?token=SENSITIVE.
Is it possible for an attacker to steal the token, using javascript or flash, in ...
user61429
3
votes
2
answers
870
views
Exploiting flash XSS holes
I have a URL to a flash file. Sample :-
http://abc.mydomain.com/Findme.swf
Now, there is a parameter called xmlpath as :-
http://abc.mydomain.com/Findme.swf?xmlPath=something.
Is it not that ...
- 1,522