Sql injection

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATHINFO to /docushare/dsweb/ResultBackgroundJobMultiple/. NOTE: some of the...

CVE-2014-3138

CVE-2014-3138 describes an SQL injection in Xerox DocuShare. The vulnerability affects DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3, allowing remote authenticated users to execute arbitrary SQL commands via PATH_INFO to /docushare/dsw...

CVE-2014-3138

SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATHINFO to /docushare/dsweb/ResultBackgroundJobMultiple/. NOTE: some of the...

Xerox DocuShare SQLi Vulnerability (Apr 2014) - Active Check

Xerox DocuShare is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Xerox DocuShare SQL Injection

The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

Xerox DocuShare - SQL Injection Vulnerability

Exploit for hardware platform in category web applications The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101...

Xerox DocuShare - SQL Injection

Xerox DocuShare - SQL Injection The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

Xerox DocuShare - SQL Injection

The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

CVE-2008-5225

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...

CVE-2008-5225

CVE-2008-5225 affects Xerox DocuShare 6 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the dsweb servlet where unsanitized PATH_INFO is echoed in dynamic HTML, enabling remote injection of script or HTML via the default URI under SearchResults/ and Services/ in dsdn/dsweb/...

CVE-2008-5225

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...

Xerox DocuShare多个跨站脚本漏洞

BUGTRAQ ID: 29430 Xerox DocuShare是基于Web的内容管理解决方案。 DocuShare没有正确地过滤对dsdn/dsweb/SearchResults/或dsdn/dsweb/Services/所提供的输入返回给了用户，这允许远程攻击者通过跨站脚本攻击在用户浏览器会话中执行任意HTML和脚本代码。 Xerox DocuShare 6.0 Xerox ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.xerox.com...

Xerox DocuShare dsweb Servlet Multiple XSS

The remote host is running DocuShare, a web-based document management application from Xerox. The version of DocuShare installed on the remote host fails to sanitize user input to the 'dsweb' servlet before including it in dynamic HTML output. An attacker may be able to leverage this issue to...

XEROX DocuShare URL XSS Injection Vulnerabilities

XEROX DocuShare URL XSS Injection Vulnerabilities Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Xerox DocuShare 6 - dsdndswebServicesUser URI Cross-Site Scripting

Xerox DocuShare 6 - dsdndswebServicesUser URI Cross-Site Scripting source: https://www.securityfocus.com/bid/29430/info Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecti...

Xerox DocuShare 6 - dsdndswebSearchResults URI Cross-Site Scripting

Xerox DocuShare 6 - dsdndswebSearchResults URI Cross-Site Scripting source: https://www.securityfocus.com/bid/29430/info Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Xerox DocuShare 6 - docusharedswebServicesLibGroup URI Cross-Site Scripting

Xerox DocuShare 6 - docusharedswebServicesLibGroup URI Cross-Site Scripting source: https://www.securityfocus.com/bid/29430/info Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

xerox-xss.txt

XEROX DocuShare URL XSS Injection Vulnerabilities Xerox DocuShare is a flexible Web-based content management solution that brings greater productivity to every knowledge worker. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Xerox DocuShare 6 - docushare/dsweb/ServicesLib/Group URI Cross-Site Scripting

source: https://www.securityfocus.com/bid/29430/info Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the...