CVE-2008-6061

Techsmith Camtasia Studio <5 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Rich Cannings · textremotemultiple
https://www.exploit-db.com/exploits/30972

References (6)

Scores

EPSS 0.0136
EPSS Percentile 79.9%

Classification

CWE
CWE-79
Status published

Affected Products (23)

techsmith/camtasia_studio < 4.0.2
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
techsmith/camtasia_studio
... and 8 more

Timeline

Published Feb 05, 2009
Tracked Since Feb 18, 2026