CVE-2008-4931

FirmChannel Digital Signage 3.24 (account module) contains a cross-site scripting (XSS) vulnerability that allows an attacker to inject arbitrary script via the action parameter to index.php. Findings across sources indicate the issue affects 3.24 and possibly earlier versions, with remediation i...

CVE-2008-4931: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php...

firmchannel-xss.txt

Title: FirmChannel Digital Signage 3.24 Cross-site scripting ------------------------------------------------------------- Vendor: FirmChannel Vendor URL: www.firmchannel.com Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release. Description: A...

firmCHANNEL Indoor & Outdoor Digital Signage 3.24 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/32107/info firmCHANNEL Indoor & Outdoor Digital SIGNAGE is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

firmCHANNEL Indoor Outdoor Digital Signage 3.24 - Cross-Site Scripting

firmCHANNEL Indoor Outdoor Digital Signage 3.24 - Cross-Site Scripting source: https://www.securityfocus.com/bid/32107/info firmCHANNEL Indoor & Outdoor Digital SIGNAGE is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...