CVE-2008-4931

FirmChannel Digital Signage 3.24 (account module) contains a cross-site scripting (XSS) vulnerability that allows an attacker to inject arbitrary script via the action parameter to index.php. Findings across sources indicate the issue affects 3.24 and possibly earlier versions, with remediation i...