CVE-2008-6238

Cross-site scripting XSS vulnerability in archive/savedqueries/savequeryfinish.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the name parameter...

CVE-2008-6239

Cross-site request forgery CSRF vulnerability in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors...

CVE-2005-4476

Cross-site scripting XSS vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 oe-action and 2 page parameters...

CVE-2005-4476

Cross-site scripting XSS vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 oe-action and 2 page parameters...

CVE-2005-4476

The CVE-2005-4476 entry documents a Cross-site scripting (XSS) vulnerability in OpenEdit 4.0 and earlier, specifically in store/search/results.html, exploitable via the oe-action and page HTTP parameters. The issue allows remote attackers to inject arbitrary web script or HTML. Affected product i...

OpenEdit XSS vuln.

OpenEdit XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/openedit-xss-vuln.html vendor:http://www.openedit.org affected version:4.0 and prior Product Description: Developed in partnership with Web designers, OpenEdit offers a host of...

OpenEdit 4.0 - Results.HTML Cross-Site Scripting

source: https://www.securityfocus.com/bid/16004/info OpenEdit is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of ...

OpenEdit 4.0 - Results.HTML Cross-Site Scripting

OpenEdit 4.0 - Results.HTML Cross-Site Scripting source: https://www.securityfocus.com/bid/16004/info OpenEdit is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...