Rich Cannings

3 exploits Active since Dec 2007
CVE-2008-6060 EXPLOITDB text WORKING POC
FusionCharts - Cross-Site Scripting via dataURL Parameter
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter.
CVE-2007-6244 EXPLOITDB text WORKING POC
Adobe Flash Player <9.0.48.0,8.0.35.0 - XSS
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used with the Flash Player ActiveX Control in Internet Explorer.
CVE-2008-6061 EXPLOITDB text WRITEUP
Techsmith Camtasia Studio < 4.0.2 - Cross-Site Scripting via csPreloader Parameter
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter.