Xerox DocuShare 6 - dsdn/dsweb/Services/User URI XSS

No description provided by source. source: http://www.securityfocus.com/bid/29430/info Xerox DocuShare is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

CVE-2008-5225

CVE-2008-5225 affects Xerox DocuShare 6 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the dsweb servlet where unsanitized PATH_INFO is echoed in dynamic HTML, enabling remote injection of script or HTML via the default URI under SearchResults/ and Services/ in dsdn/dsweb/...