CVE-2008-6637 Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libraryvideocompany safari montage | <= 3.1.3 | No fix listed |
References
- 45646 vdb-entry
- 30363 third-party-advisory vendor-advisory
- www.digitrustgroup.com exploit
- 29343 exploit vdb-entry
- ADV-2008-1652 vdb-entry vendor-advisory
- safarimontage-forgotpw-xss(42598) vdb-entry