CVE-2017-12439 | BDVDB-2026-88482 Detail

Description#

SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTTP parameter that trusts user-supplied input, in conjunction with an unsafe XML configuration file. This has resultant content forgery, cross site scripting, and unvalidated redirection issues.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://packetstormsecurity.com/files/143542/Flash-Slideshow-Maker-Professional-XSS-Content-Forgery-Redirect.html

Exploit#

No public exploit known

History#

Version 12017-08-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.