Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Yahoo YUI library 跨站脚本漏洞
Vulnerability Description
Yahoo YUI library是美国雅虎(Yahoo)公司的一款开源的JavaScript和CSS库。该产品主要用于构建丰富的交互式Web应用程序。 Yahoo YUI library 2.4.0至2.9.0版本中的Flash组件的基础设施中存在跨站脚本漏洞。远程攻击者利用该漏洞通过与charts.swf相关的向量,注入任意web脚本或HTML。
CVSS Information
N/A
Vulnerability Type
N/A