CAPEC-174 Flash Parameter Injection
abstraction: detailedstatus: activeAn adversary takes advantage of improper data validation to inject malicious global parameters into a Flash file embedded within an HTML document. Flash files can leverage user-submitted data to configure the Flash document and access the embedding HTML document.
likelihood: Highseverity: Medium
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.