CVE-2013-2204

CVE-2013-2204

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

moxieplayer.as in Moxiecode moxieplayer, as used in the TinyMCE Media plugin in WordPress before 3.5.2 and other products, does not consider the presence of a # (pound sign) character during extraction of the QUERY_STRING, which allows remote attackers to pass arbitrary parameters to a Flash application, and conduct content-spoofing attacks, via a crafted string after a ? (question mark) character.

EPSS 2,9% · Corrección disponible

Publicación

2013-07-08T20:00:00.000Z

Actualización

2024-08-06T15:27:41.131Z

Pila tecnológica: system

Comprueba tu servidor →