CVE-2008-6060 Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content vi...
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infosoftglobal fusion charts | All versions | No fix listed |
References
- docs.google.com
- VU#249337 third-party-advisory us-government-resource
- 20080102 XSS Vulnerabilities in Common Shockwave Flash Files mailing-list
- 27109 vdb-entry
- ADV-2008-0067 vdb-entry