CVE-2007-0437

CVE-2007-0437 involves multiple cross-site scripting (XSS) vulnerabilities in the sample Cache' Server Page (CSP) scripts of InterSystems Cache. The affected components are CSP samples under csp/samples/: loop.csp (TO parameter), cookie.csp (VALUE), showsource.csp (PAGE); and (4) xmlclasseserror....

CVE-2007-4427

InterSystems Cache CSP login-page redirection logic (Cache’ 2007.1.0.369.0 and 2007.1.1.420.0) contains an unspecified vulnerability in parameter value encoding that lets remote authenticated users modify server data. Root cause: encoding of certain parameters in the redirection logic. Impact: da...