CAPEC-174: Flash Parameter Injection
An adversary takes advantage of improper data validation to inject malicious global parameters into a Flash file embedded within an HTML document. Flash files can leverage user-submitted data to configure the Flash document and access the embedding HTML document.
Severity
Medium
Likelihood
High
16
/ 100
low-risk
Active Threat
15/50 · Low
Exploit Availability
1/50 · Minimal