CVE-2008-6637

Опубликовано: 07 апр. 2009

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters.

Ссылки

http://osvdb.org/45646
http://secunia.com/advisories/30363
Vendor Advisory
http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html
Exploit
http://www.securityfocus.com/bid/29343
Exploit
http://www.vupen.com/english/advisories/2008/1652
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42598
http://osvdb.org/45646
http://secunia.com/advisories/30363
Vendor Advisory
http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html
Exploit
http://www.securityfocus.com/bid/29343
Exploit
http://www.vupen.com/english/advisories/2008/1652
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42598

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libraryvideocompany:safari_montage:*:*:*:*:*:*:*:*

Версия до 3.1.3 (включая)

EPSS

Процентиль: 64%

0.00461

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-vh5j-v2vh-c7xp

github

больше 3 лет назад