CVE-2008-2979: Multiple cross-site scripting (XSS) vulnerabilities in phpi/login.php in Ourvideo CMS 9.5 allow remote atta...

Security readout for executives and security teams

Ourvideo CMS 9.5 has cross-site scripting flaws in its login page. A remote attacker could inject script or HTML through login.php parameters, potentially affecting users who visit a crafted or vulnerable page. The source bundle does not provide CVSS, confirmed active exploitation, or vendor remediation details. Exposure is likely limited to organizations still running Ourvideo CMS 9.5 or code derived from it, especially if the login page is internet-accessible. The affected metadata is incomplete, so inventory confirmation matters. Prioritize discovery over emergency response. This is an old, public XSS issue with no confirmed active exploitation in the bundle, but unsupported internet-facing CMS software can create avoidable account and content integrity risk. Mitigation focus: Identify any Ourvideo CMS 9.5 deployments or inherited code.; Check vendor or maintainer guidance for fixed versions or patches.; Restrict public access to affected login pages where feasible..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.