Vulnerabilities

TI-2018-08353 CVE-2018-11686 · GHSA-pqf7-xmp7-f2q9

The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code…

HIGH 74

The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.52542 Published 2019-07-03 No fix listed CWE-20

TI-2014-07868 CVE-2014-9678 · GHSA-4wv4-6mjq-34pw

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct…

LOW 29

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfile parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01031 Published 2017-10-17 No fix listed CWE-20

TI-2014-07867 CVE-2014-9677 · GHSA-h6c9-rcfp-hgrg

Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1…

LOW 30

Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the Swfile parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01151 Published 2017-10-17 No fix listed CWE-79

Vulnerabilities

Filters

The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code…

FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct…

Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1…