medium4.3Public exploit code
CVE-2008-6060
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- InfoSoft FusionCharts 3 - '.swf' Flash File Remote Code Execution2008-01-02 · remote · multiple · Verified
Impact
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infosoftglobal | Fusion Charts | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw
- http://www.kb.cert.org/vuls/id/249337
- http://www.securityfocus.com/archive/1/485722/100/100/threaded
- http://www.securityfocus.com/bid/27109
- http://www.vupen.com/english/advisories/2008/0067
- http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw
- http://www.kb.cert.org/vuls/id/249337
- http://www.securityfocus.com/archive/1/485722/100/100/threaded
- http://www.securityfocus.com/bid/27109
- http://www.vupen.com/english/advisories/2008/0067