CVE-2007-3835

CVE-2007-3835 has confirmed XSS in Ex Libris MetaLib 3.13 and 4. An attacker can inject arbitrary web script/HTML via an unspecified vector related to a resource identifier that can be discovered through a search. The vulnerability is remote in scope and leverages the user’s interaction with sear...

CVE-2007-3834

CVE-2007-3834 covers multiple XSS vulnerabilities in Ex Libris ALEPH (and note may be related to the MetaLib XSS issue CVE-2007-3835). Affected: Ex Libris ALEPH; vulnerability type: cross-site scripting via unspecified vectors in a URL discoverable by keyword search. Impact details are limited to...