<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
<site-control permitted-cross-domain-policies="master-only"/>
</cross-domain-policy>
I would like to ask two questions:
Is this crossdomain.xml vulnerable (the file is placed on the root of the host e.g. www.example.com/crossdomain.xml)?
How I can exploit or test similar files?