CVE-2008-6061

Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:techsmith:camtasia_studio:*:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:1.0:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:1.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.0:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:3.1.0:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:techsmith:camtasia_studio:4.0.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-02-05 01:30

Updated : 2023-12-10 10:51


NVD link : CVE-2008-6061

Mitre link : CVE-2008-6061

CVE.ORG link : CVE-2008-6061


JSON object : View

Products Affected

techsmith

  • camtasia_studio
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')