Xerox DocuShare 6 - dsdn/dsweb/Services/User URI XSS

No description provided by source. source: http://www.securityfocus.com/bid/29430/info Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

CVE-2008-5225

CVE-2008-5225 affects Xerox DocuShare 6 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the dsweb servlet where unsanitized PATH_INFO is echoed in dynamic HTML, enabling remote injection of script or HTML via the default URI under SearchResults/ and Services/ in dsdn/dsweb/...

CVE-2008-5225: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to the default URI under 1 SearchResults/ and 2 Services/ in dsdn/dsweb/, and 3 the default URI under unspecified...