CVEvulnerability
CVE-2008-4931
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php.
Affected configurations
• firmchannel digital signage 3.24
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/49564 osvdb.org
- http://secunia.com/advisories/32549 secunia.com
- http://securityreason.com/securityalert/4566 securityreason.com
- http://www.securityfocus.com/archive/1/498042/100/0/threaded www.securityfocus.com
- http://osvdb.org/49564 osvdb.org
- http://secunia.com/advisories/32549 secunia.com
- http://securityreason.com/securityalert/4566 securityreason.com
- http://www.securityfocus.com/archive/1/498042/100/0/threaded www.securityfocus.com