CVEvulnerability
CVE-2008-6637
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters.
Affected configurations
• libraryvideocompany safari montage (<= 3.1.3)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/45646 osvdb.org
- http://secunia.com/advisories/30363 Vendor Advisory
- http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html Exploit
- http://www.securityfocus.com/bid/29343 Exploit
- http://www.vupen.com/english/advisories/2008/1652 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42598 exchange.xforce.ibmcloud.com
- http://osvdb.org/45646 osvdb.org
- http://secunia.com/advisories/30363 Vendor Advisory
- http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html Exploit
- http://www.securityfocus.com/bid/29343 Exploit
- http://www.vupen.com/english/advisories/2008/1652 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42598 exchange.xforce.ibmcloud.com