Analysis of Several flash xss vulnerabilities

Vulnerability 1: Parameters. getInstance (). data = loaderInfo. parameters; public function get onPlayStart (): String {return (_ data ["onPlayStart"]);} ExternalInterface. call (Parameters. getInstance (). onPlayStart, _ arg1); ExternalInterface. call (Parameters. getInstance (). onPlayStop); ExternalInterface. call (Parameters. getInstance (). onFileLoadedError); vulnerability 2: function reload (u, show_loading) {if (show_loading = undefined ){ Show_loading = true;} if (show_loading) {_ root. loading = new Loading ("Loading data... ");} var _ local2 =" "; if (_ root. data! = Undefined) {_ local2 = _ root. data;} if (u! = Undefined) {if (u. length> 0) {_ local2 = u;} _ root. lv = undefined; _ root. lv = new LoadVars (); _ root. lv. onLoad = LoadVarsOnLoad; _ root. lv. make_chart = make_chart; _ root. lv. make_pie = make_pie; _ root. lv. load (_ local2);} vulnerability 3: var csPreloader; loader. loadClip (csPreloader, preloader_mc.target); vulnerability 4: this. loadXML (file); function init (file, ploader, bookmark, contentpath) container. init (csConfigFile, Preloader_mc, csFilesetBookmark, contentpath); var csConfigFile; vulnerability 5: getURL (_ loc2, this. playList. currentClip (). getLinkWindow (); var _ loc2 = this. playList. currentClip (). getLinkURL (); _ loc1.getLinkURL = function () {return (this. linkUrl) ;}; www.2cto.com var _ loc1 = (_ global.org. flowplayer. playlist. clip = function (name, baseUrl, fileName, start, end, protected, enableControl, linkUrl, linkWindow, Type, allowResize, overlayFileName, overlayId, live, showOnLoadBegin, maxPlayCount, info, thumbnailUrl, suggestedClipsInfoUrl, id, keywords) {this. linkUrl = linkUrl;} vulnerability 6: this.textField.html Text = ['', content,'']. join (''); _ global. sIFR = function (textField, content ){...... This. write (content );......} SIFR. instance = new sIFR(_loc3.txt F, _ loc4); _ loc4 = sIFR. VERSION_WARNING.split ("% s "). join (_ root. version); vulnerability 7: this. _ setVar ("_ onClick", [_ root. onclick, pConfig. onclick], "String"); getURL (this. _ onClick, this. _ onClickTarget); write a simple flash xss detection script to detect known vulnerabilities: