CVE-2008-6062

Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637.

• CWE-79

• http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw
• http://www.adobe.com/support/security/bulletins/apsb07-20.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/249337US Government Resource
• http://www.securityfocus.com/archive/1/485722/100/100/threaded
• http://docs.google.com/View?docid=ajfxntc4dmsq_14dt57ssdw
• http://www.adobe.com/support/security/bulletins/apsb07-20.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/249337US Government Resource
• http://www.securityfocus.com/archive/1/485722/100/100/threaded

Published

Feb 5, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6056Multiple cross-site scripting (XSS) vulnerabilities in World…
• CVE-2008-6057Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.m…
• CVE-2008-6058Syslserve 1.058 and earlier, and probably 1.059, allows remo…
• CVE-2008-6059xml/XMLHttpRequest.cpp in WebCore in WebKit before r38566 do…
• CVE-2008-6060Cross-site scripting (XSS) vulnerability in ActionScript in …
• CVE-2008-6061Cross-site scripting (XSS) vulnerability in ActionScript in …
• CVE-2008-6063Microsoft Word 2007, when the "Save as PDF" add-on is enable…
• CVE-2008-6064Multiple SQL injection vulnerabilities in DomPHP 0.81 allow …
• CVE-2008-6065Oracle Database Server 10.1, 10.2, and 11g grants directory …
• CVE-2008-6066Multiple PHP remote file inclusion vulnerabilities in Meet#W…
• CVE-2008-6067Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2008-6068SQL injection vulnerability in the JoomlaDate (com_joomladat…