KLA10240 CI vulnerability in Kontiki DMS

An XSS vulnerability was found in Kontiki DMS. By exploiting this vulnerability malicious users can inject arbitrary web script. This vulnerability can be exploited remotely via a specially designed call.

Original advisories

Related products

Kontiki-Delivery-Management-System

CVE list

CVE-2008-4393 warning

Solution

Update to latest version

Impacts

• CI

Code injection. Exploitation of vulnerabilities with this impact can lead to changes in target code.

Affected Products

• VeriSign Kontiki Delivery Management System versions 5.0 and earlier