Multiple cross-site scripting (XSS) vulnerabilities in Flowplayer Flash prior to 3.2.17, as used in Moodle up to and including 2.3.11, 2.4.x prior to 2.4.9, 2.5.x prior to 2.5.5, and 2.6.x prior to 2.6.2, allow remote malicious users to inject arbitrary web script or HTML by (1) providing a crafted playerId or (2) referencing an external domain, a related issue to CVE-2013-7342.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
moodle moodle 2.0.3 |
||
moodle moodle 2.0.4 |
||
moodle moodle 2.0.5 |
||
moodle moodle 2.0.6 |
||
moodle moodle 2.0.7 |
||
moodle moodle 2.1.9 |
||
moodle moodle 2.2.0 |
||
moodle moodle 2.2.1 |
||
moodle moodle 2.2.10 |
||
flowplayer flowplayer flash 3.2.12 |
||
flowplayer flowplayer flash 3.2.11 |
||
flowplayer flowplayer flash 3.2.10 |
||
flowplayer flowplayer flash 3.2.9 |
||
flowplayer flowplayer flash 3.1.0 |
||
flowplayer flowplayer flash 3.1.4 |
||
flowplayer flowplayer flash 3.0.6 |
||
flowplayer flowplayer flash 3.0.5 |
||
moodle moodle 2.4.0 |
||
moodle moodle 2.4.1 |
||
moodle moodle 2.4.2 |
||
moodle moodle 2.4.3 |
||
moodle moodle 2.3.6 |
||
moodle moodle 2.3.7 |
||
moodle moodle 2.3.8 |
||
moodle moodle 2.3.9 |
||
moodle moodle 2.1.10 |
||
moodle moodle 2.1.2 |
||
moodle moodle 2.1.3 |
||
moodle moodle 2.1.4 |
||
moodle moodle 2.2.5 |
||
moodle moodle 2.2.6 |
||
moodle moodle 2.2.7 |
||
moodle moodle 2.2.8 |
||
moodle moodle 2.2.9 |
||
flowplayer flowplayer flash 3.2.4 |
||
flowplayer flowplayer flash 3.2.3 |
||
flowplayer flowplayer flash 3.2.2 |
||
flowplayer flowplayer flash 3.2.1 |
||
flowplayer flowplayer flash 3.0.0 |
||
moodle moodle 2.6.0 |
||
moodle moodle 2.6.1 |
||
moodle moodle 2.5.0 |
||
moodle moodle 2.3.0 |
||
moodle moodle 2.3.1 |
||
moodle moodle 2.3.10 |
||
moodle moodle |
||
moodle moodle 2.0.1 |
||
moodle moodle 2.0.8 |
||
moodle moodle 2.1.0 |
||
moodle moodle 2.1.6 |
||
moodle moodle 2.1.8 |
||
moodle moodle 2.2.11 |
||
moodle moodle 2.2.3 |
||
flowplayer flowplayer flash |
||
flowplayer flowplayer flash 3.2.14 |
||
flowplayer flowplayer flash 3.2.7 |
||
flowplayer flowplayer flash 3.2.5 |
||
flowplayer flowplayer flash 3.2.0 |
||
flowplayer flowplayer flash 3.1.3 |
||
flowplayer flowplayer flash 3.1.1 |
||
flowplayer flowplayer flash 3.0.4 |
||
flowplayer flowplayer flash 3.0.2 |
||
moodle moodle 2.5.2 |
||
moodle moodle 2.5.4 |
||
moodle moodle 2.4.4 |
||
moodle moodle 2.4.6 |
||
moodle moodle 2.4.8 |
||
moodle moodle 2.3.2 |
||
moodle moodle 2.3.4 |
||
moodle moodle 2.0.0 |
||
moodle moodle 2.0.2 |
||
moodle moodle 2.0.9 |
||
moodle moodle 2.1.1 |
||
moodle moodle 2.1.5 |
||
moodle moodle 2.1.7 |
||
moodle moodle 2.2.2 |
||
moodle moodle 2.2.4 |
||
flowplayer flowplayer flash 3.2.15 |
||
flowplayer flowplayer flash 3.2.13 |
||
flowplayer flowplayer flash 3.2.8 |
||
flowplayer flowplayer flash 3.2.6 |
||
flowplayer flowplayer flash 3.1.5 |
||
flowplayer flowplayer flash 3.1.2 |
||
flowplayer flowplayer flash 3.0.3 |
||
flowplayer flowplayer flash 3.0.1 |
||
moodle moodle 2.5.1 |
||
moodle moodle 2.5.3 |
||
moodle moodle 2.4.5 |
||
moodle moodle 2.4.7 |
||
moodle moodle 2.3.3 |
||
moodle moodle 2.3.5 |
Vulmon