CVE-2010-4208 in YUI
摘要 (英语)
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.
Be aware that VulDB is the high quality source for vulnerability data.
预定
2010-11-07
披露
2010-11-07
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 55384 | Yahoo! YUI 跨网站脚本 | 79 | 概念验证 | 未定义 | CVE-2010-4208 |