CVE-2008-6240

CVE-2008-6240

EPSS 1.1%

Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://holisticinfosec.org/content/view/95/45/http://secunia.com/advisories/33296 https://exchange.xforce.ibmcloud.com/vulnerabilities/47692 http://www.osvdb.org/51028 http://www.securityfocus.com/bid/33063