CVE-2008-1894

Cross-site scripting XSS vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Java version before FixPack 3.5 allows remote attackers to inject arbitrary web script or HTML via the cms parameter...

CVE-2008-1894

CVE-2008-1894 affects BusinessObjects InfoView XI R2 (SP1, SP2, SP3) Java version before FixPack 3.5. The vulnerability is an XSS in desktoplaunch/InfoView/logon/logon.object via the cms parameter, allowing remote attackers to inject arbitrary web script/HTML. Evidence from CVE records and NVD co...