Description

The Flvplayer component in TYPO3 6.2.x before 6.2.16 allows remote attackers to embed Flash videos from external domains via unspecified vectors, aka "Cross-Site Flashing."

Remediation

References

CVE-2015-8760

Related Vulnerabilities

Apache version up to 1.3.33 htpasswd local overflow

WordPress 4.0.x Same Origin Method Execution (SOME) Vulnerability (4.0 - 4.0.10)

Oracle Database Server CVE-2019-2749 Vulnerability (CVE-2019-2749)

Oracle Application Server CVE-2007-3854 Vulnerability (CVE-2007-3854)

Internet Information Services Other Vulnerability (CVE-2002-1181)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2015-8760