CVE-2008-6637

Multiple cross-site scripting (XSS) vulnerabilities in forgotPW.php in Library Video Company SAFARI Montage 3.1.x allow remote attackers to inject arbitrary web script or HTML via the (1) school and (2) email parameters.

Link	Resource
http://secunia.com/advisories/30363	Vendor Advisory
http://www.vupen.com/english/advisories/2008/1652	Vendor Advisory
http://www.digitrustgroup.com/advisories/web-application-security-safari-montage.html	Exploit
http://www.securityfocus.com/bid/29343	Exploit
http://osvdb.org/45646
https://exchange.xforce.ibmcloud.com/vulnerabilities/42598

Configuration 1

cpe:2.3:a:libraryvideocompany:safari_montage:*:*:*:*:*:*:*:*

---

Published : 2009-04-07 02:17

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6637

Mitre link : CVE-2008-6637

Libraryvideocompany

CWE-79