Xerox DocuShare - SQL Injection

No description provided by source. The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101 Firefox/26.0 Accept:...

Xerox DocuShare ResultBackgroundJobMultiple SQL Injection

An SQL injection vulnerability has been reported in Xerox DocuShare. The vulnerability is due to insufficient validation of requests sent to ResultBackgroundJobMultiple. A remote attacker can exploit this vulnerability by sending a specially crafted request to the target service. This can result ...

PT-2014-5112

Name of the Vulnerable Software and Affected Versions Xerox DocuShare versions prior to 6.53 Patch 6 Hotfix 2 Xerox DocuShare versions 6.6.1 Update 1 prior to Hotfix 24 Xerox DocuShare versions 6.6.1 Update 2 prior to Hotfix 3 Description The issue allows remote authenticated users to execute...

Xerox DocuShare - SQL Injection Vulnerability

Exploit for hardware platform in category web applications The following request is vulnerable to a SQL injection in the last URI segment: GET /docushare/dsweb/ResultBackgroundJobMultiple/1 HTTP/1.1 Host: 172.31.16.194:8080 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664; rv:26.0 Gecko/20100101...