Unrated severityNVD Advisory· Published Feb 23, 2009· Updated Jun 16, 2026
CVE-2008-6240
CVE-2008-6240
Description
Cross-site scripting (XSS) vulnerability in data/views/index.html in OpenEdit Digital Asset Management (DAM) before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter.
Affected products
2<5.2014+ 1 more
- (no CPE)range: <5.2014
- cpe:2.3:a:openedit:openedit_digital_asset_management:*:*:*:*:*:*:*:*range: <=5.0
Patches
Vulnerability mechanics
References
5- secunia.com/advisories/33296nvdVendor Advisory
- www.securityfocus.com/bid/33063nvdVendor Advisory
- holisticinfosec.org/content/view/95/45/nvd
- www.osvdb.org/51028nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/47692nvd
News mentions
0No linked articles in our index yet.